SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint adf0ae94a3d1ca30f0cbc23bfffb93b5d01c6fda.

Database Entry

SHA1 Fingerprint:adf0ae94a3d1ca30f0cbc23bfffb93b5d01c6fda
Certificate Common Name (CN):eclefithe.sg
Issuer Distinguished Name (DN):eclefithe.sg
TLS Version:TLS 1.2
First seen:2016-03-17 20:55:12 UTC
Last seen:2016-03-22 17:22:13 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-03-18 13:19:55
Malware samples:4
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-03-22 17:22:13f86204bbaf52c0090f8c8ee4cd6a3ce8Virustotal results 23/55 (41.82%) Dridex 188.93.239.28:4843
2016-03-22 17:22:13f86204bbaf52c0090f8c8ee4cd6a3ce8Virustotal results 23/55 (41.82%) Dridex 188.93.239.28:4843
2016-03-19 23:45:0350b2dccf38eaf71c37d622f04cd0cd64Virustotal results 38/57 (66.67%) Dridex 188.93.239.28:4843
2016-03-19 23:45:0350b2dccf38eaf71c37d622f04cd0cd64Virustotal results 38/57 (66.67%) Dridex 188.93.239.28:4843
2016-03-19 17:21:43c01a47fea1ea7d6aa67dfb5aa06262efVirustotal results 35/57 (61.40%) Dridex 188.93.239.28:4843
2016-03-19 17:21:43c01a47fea1ea7d6aa67dfb5aa06262efVirustotal results 35/57 (61.40%) Dridex 188.93.239.28:4843
2016-03-17 20:55:12df349df91be35f8b0696c206317a8019Virustotal results 4/55 (7.27%) Dridex 188.93.239.28:4843
2016-03-17 20:55:12df349df91be35f8b0696c206317a8019Virustotal results 4/55 (7.27%) Dridex 188.93.239.28:4843

# of entries: 8 (max: 100)