SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint a52e17fe607d1e562e0cb67c6f2342e6b4dbf191.
Database Entry
| SHA1 Fingerprint: | a52e17fe607d1e562e0cb67c6f2342e6b4dbf191 |
|---|---|
| Certificate Common Name (CN): | 1001gacor.org |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-08-17 15:09:24 UTC |
| Last seen: | 2026-08-18 09:09:57 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-08-18 09:12:54 |
| Malware samples: | 13 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-08-18 09:09:57 | 7150cf90fe9b3a1cc2ce8a9060a7d23b | n/a | 172.67.207.32:443 | |
| 2026-08-18 07:51:15 | 101f4ca5c519357869d967cbd1374940 | n/a | 172.67.207.32:443 | |
| 2026-08-17 22:23:43 | dac9b8fb50eaeaf0453a9d6ae115570d | n/a | 172.67.207.32:443 | |
| 2026-08-17 22:02:30 | 1e3ea8e0ede4690fb52aa437287073af | n/a | 104.21.22.216:443 | |
| 2026-08-17 21:21:11 | 56e23ae8475784e31f85f887b2b9993f | n/a | 172.67.207.32:443 | |
| 2026-08-17 21:02:59 | c0a326051a75456bf463f5e672f08065 | n/a | 172.67.207.32:443 | |
| 2026-08-17 20:36:37 | 7b96b0af5f6afd91af8d09d6850133d3 | n/a | 172.67.207.32:443 | |
| 2026-08-17 20:11:07 | 0b230158ac29f3e32379036724a148aa | n/a | 104.21.22.216:443 | |
| 2026-08-17 16:40:20 | c299ca6311547692ddc9d8653eb67547 | n/a | 172.67.207.32:443 | |
| 2026-08-17 16:32:35 | 0b65514be17a7034ed7d66307d5edc71 | n/a | 104.21.22.216:443 | |
| 2026-08-17 16:22:31 | 42f786f0fab35521fdcf7632ab1f83aa | n/a | 104.21.22.216:443 | |
| 2026-08-17 15:52:46 | 1fd1a9b422d596c9f37ce047e36fe893 | n/a | 104.21.22.216:443 | |
| 2026-08-17 15:09:25 | 182d61acff66e226ddfe1654b59a26ea | n/a | 172.67.207.32:443 |
# of entries: 13 (max: 100)