SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint a48fcb663de8dbbadcd17b8f836e2c5d4ed3b330.

Database Entry


SHA1 Fingerprint:a48fcb663de8dbbadcd17b8f836e2c5d4ed3b330
Certificate Common Name (CN):example.com
Issuer Distinguished Name (DN):example.com
TLS Version:TLS 1.2
First seen:2018-01-14 13:20:53 UTC
Last seen:2018-01-19 18:03:59 UTC
Status:Blacklisted
Listing reason:TrickBot C&C
Listing date:2018-01-19 14:40:57
Malware samples:11
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-01-19 18:03:59a1e0fbacaa6311bbf37b93c8ac7d0556Virustotal results 11/68 (16.18%) TrickBot 82.146.57.127:443
2018-01-19 18:03:59a1e0fbacaa6311bbf37b93c8ac7d0556Virustotal results 11/68 (16.18%) TrickBot 82.146.57.127:443
2018-01-17 16:33:4620a3dc15581d4620c0b04dc9b42a872aVirustotal results 38/67 (56.72%) TrickBot 82.146.57.127:443
2018-01-17 16:33:4620a3dc15581d4620c0b04dc9b42a872aVirustotal results 38/67 (56.72%) TrickBot 82.146.57.127:443
2018-01-17 06:07:5292168328453a4fde7e21900d6c39cafcVirustotal results 25/67 (37.31%) TrickBot 82.146.57.127:443
2018-01-17 06:07:5292168328453a4fde7e21900d6c39cafcVirustotal results 25/67 (37.31%) TrickBot 82.146.57.127:443
2018-01-16 22:05:047461bd0e3482f7f6b295d74ad6c25660Virustotal results 37/68 (54.41%) TrickBot 82.146.57.127:443
2018-01-16 22:05:047461bd0e3482f7f6b295d74ad6c25660Virustotal results 37/68 (54.41%) TrickBot 82.146.57.127:443
2018-01-15 14:37:08cc649aec882f7052c3d5f4b9a2b60c13Virustotal results 34/68 (50.00%) Smoke Loader 82.146.57.127:443
2018-01-15 03:46:413209ffc8d8784e3a54a5ab5856473c50Virustotal results 10/68 (14.71%) TrickBot 82.146.57.127:443
2018-01-15 03:46:413209ffc8d8784e3a54a5ab5856473c50Virustotal results 10/68 (14.71%) TrickBot 82.146.57.127:443
2018-01-15 01:49:5978c35246c7f586f977eb1b58916368a8Virustotal results 35/68 (51.47%) TrickBot 82.146.57.127:443
2018-01-15 01:49:5978c35246c7f586f977eb1b58916368a8Virustotal results 35/68 (51.47%) TrickBot 82.146.57.127:443
2018-01-15 01:05:20546789c1cd49bac4013f07f39f9a6f7dVirustotal results 27/66 (40.91%) TrickBot 82.146.57.127:443
2018-01-15 01:05:20546789c1cd49bac4013f07f39f9a6f7dVirustotal results 27/66 (40.91%) TrickBot 82.146.57.127:443
2018-01-14 16:38:5217f050c5af94acce5aadb20ff45c534cVirustotal results 12/68 (17.65%) TrickBot 82.146.57.127:443
2018-01-14 16:38:5217f050c5af94acce5aadb20ff45c534cVirustotal results 12/68 (17.65%) TrickBot 82.146.57.127:443
2018-01-14 15:08:41aa74d8418903bb73261b6d36bf4215e5Virustotal results 14/66 (21.21%) TrickBot 82.146.57.127:443
2018-01-14 15:08:41aa74d8418903bb73261b6d36bf4215e5Virustotal results 14/66 (21.21%) TrickBot 82.146.57.127:443
2018-01-14 13:20:534cd943175d68b31536451617434b0588Virustotal results 14/68 (20.59%) TrickBot 82.146.57.127:443
2018-01-14 13:20:534cd943175d68b31536451617434b0588Virustotal results 14/68 (20.59%) TrickBot 82.146.57.127:443

# of entries: 21 (max: 100)