SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 9f7fd5816e0bf900bc5142ef5f6f1e9c0fb2cfdf.
Database Entry
| SHA1 Fingerprint: | 9f7fd5816e0bf900bc5142ef5f6f1e9c0fb2cfdf |
|---|---|
| Certificate Common Name (CN): | dwssa.top |
| Issuer Distinguished Name (DN): | R12 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-04-20 09:25:44 UTC |
| Last seen: | 2026-04-20 09:31:27 UTC |
| Status: | Blacklisted |
| Listing reason: | ConnectWise C&C |
| Listing date: | 2026-04-20 14:42:49 |
| Malware samples: | 9 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-04-20 09:31:27 | 61978ed87c3b50fc88f73c3aa74c3ec9 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:31:13 | 154e0b182ff59fa077bfe89589abb5d2 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:30:39 | bf7deaa4aad3e5231a85da265976adc9 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:30:01 | 8d1fdc44f9532228a8d72a6f369ab1d2 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:27:59 | 20227b6e8b4b29587ca4a2b1cba1541a | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:27:44 | 026ccda265231b17a527241fed0eb3a8 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:27:41 | 45874cba663ffe673280c1c040569dca | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:27:21 | 70aa0b6136e87799831b10bbb08dbfb0 | n/a | 172.96.141.136:443 | |
| 2026-04-20 09:25:44 | 346055d790a1b04216d5e5d3ce477fe9 | n/a | 172.96.141.136:443 |
# of entries: 9 (max: 100)