SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint a7da82eb15e98709ba625c843dbbe7add3246ac9.

Database Entry


SHA1 Fingerprint:a7da82eb15e98709ba625c843dbbe7add3246ac9
Certificate Common Name (CN):kpai7ycr7jxqkilp.tor2www.com
Issuer Distinguished Name (DN):RapidSSL CA
TLS Version:SSLv3
First seen:2014-06-13 20:24:06 UTC
Last seen:2014-08-16 04:06:04 UTC
Status:Blacklisted
Listing reason:CryptoWall C&C
Listing date:2014-06-14 08:17:23
Malware samples:15
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-08-16 04:06:044e3480adaf846be2073246c9879290d2Virustotal results 33/54 (61.11%) Downloader.Upatre94.156.77.26:443
2014-08-07 20:53:1391d54f6ccdd1b823502e411c1097c617Virustotal results 20/41 (48.78%) CryptoWall94.156.77.26:443
2014-08-06 19:27:2170e86ff93f238166c069703c00cf489fn/a94.156.77.26:443
2014-07-30 16:48:1767554ca1f134906497e53ac77aad593bVirustotal results 25/53 (47.17%) 94.156.77.26:443
2014-07-26 13:33:44b48bb322047f8285ba492337dd9d7393Virustotal results 21/54 (38.89%) 94.156.77.26:443
2014-07-26 08:53:21b3730758cef2b4422025189b42eca7beVirustotal results 24/54 (44.44%) 94.156.77.26:443
2014-07-24 05:09:40643e0e12e80a00d1af6c5cb1626a9c80Virustotal results 36/52 (69.23%) Downloader.Upatre94.156.77.26:443
2014-07-18 23:28:50934b014689771a7689c70cd179c8bd71Virustotal results 34/54 (62.96%) 94.156.77.26:443
2014-07-15 16:40:3379772d72082a082a0048569ba2dfe5a3Virustotal results 40/54 (74.07%) Downloader.Upatre94.156.77.26:443
2014-07-10 10:51:53d51669798d55ef5089da476a0cdf9c15Virustotal results 4/53 (7.55%) 94.156.77.26:443
2014-07-06 09:22:54870c63c4420b6f187066a94ef6c56dc6Virustotal results 30/54 (55.56%) Downloader.Upatre94.156.77.26:443
2014-06-21 23:50:013ac33f8c099200ba66e93b51e339066aVirustotal results 23/53 (43.40%) 94.156.77.26:443
2014-06-17 05:04:1580dea99051237fe9762b8182a568298aVirustotal results 26/54 (48.15%) 94.156.77.26:443
2014-06-16 18:53:260dd76242907f4f688f8e2a1f74dc401cVirustotal results 30/50 (60.00%) CryptoWall94.156.77.26:443
2014-06-13 20:24:066dc6c4943db97f647e0debaece056dd1Virustotal results 19/54 (35.19%) 94.156.77.26:443

# of entries: 15 (max: 100)