SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint af1a7c59f98298c9d3542e306d0292bdf30b4388.
Database Entry
| SHA1 Fingerprint: | af1a7c59f98298c9d3542e306d0292bdf30b4388 |
|---|---|
| Certificate Common Name (CN): | Ufgwcllkfr |
| Issuer Distinguished Name (DN): | Ufgwcllkfr |
| TLS Version: | TLSv1 |
| First seen: | 2024-12-09 21:56:24 UTC |
| Last seen: | 2026-08-02 00:09:53 UTC |
| Status: | Blacklisted |
| Listing reason: | PureRAT C&C |
| Listing date: | 2026-08-20 06:15:47 |
| Malware samples: | 24 |
| Botnet C&Cs: | 6 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-08-02 00:09:53 | aff1f5eb09bed6d85dd9a7714c18e9d7 | n/a | 167.17.76.105:56001 | |
| 2026-07-03 20:27:57 | 22512cee18efd017ad3c244ff0db31ba | n/a | 167.17.76.105:56001 | |
| 2026-02-18 05:49:14 | 1b1bd2783d4e8d1c2d444ffa8689677b | n/a | 158.94.208.36:56001 | |
| 2025-12-12 05:02:45 | 9298702d184afc539f86e4078afa8a4a | n/a | 158.94.208.36:56001 | |
| 2025-11-20 16:30:27 | 0945f92703a580baff8bc27b8426bc51 | n/a | 158.94.208.36:56001 | |
| 2025-11-11 19:21:10 | 0d95c05e5cccb8b8a62fa6ae6096c8b0 | n/a | 41.216.188.217:56001 | |
| 2025-10-07 19:57:04 | e30a640fa9474da1d9449dbceef282eb | n/a | 41.216.188.58:56001 | |
| 2025-10-07 16:32:45 | 2b1f479cd845a6696a1a7faf161fa72b | n/a | 41.216.188.58:56001 | |
| 2025-09-07 12:12:32 | 84f8feeee8df1b3586211f783da183d2 | n/a | 41.216.188.58:56001 | |
| 2025-09-07 09:39:49 | 7da2505acd8734037a140254905f50d6 | n/a | 41.216.188.58:56001 | |
| 2025-09-02 16:42:22 | bc5fd25be660e20fc9599f66f4961160 | n/a | 41.216.188.58:56001 | |
| 2025-08-19 15:06:23 | 0500a8649e047bcf510988919a4ba1d4 | n/a | 41.216.188.58:56001 | |
| 2025-08-19 13:27:48 | 1d66ace9cfb4dc2035f512b2dcc7c081 | n/a | 41.216.188.58:56001 | |
| 2025-07-09 13:08:04 | e8dc13189c53792752a73b880c9d298a | n/a | 41.216.188.58:56001 | |
| 2025-05-29 13:46:03 | 19b09abff5cf329105a69a8a46f64e53 | n/a | 41.216.188.58:56001 | |
| 2025-05-25 13:32:11 | e23aa26dbce46e9e73b0b0b2b703148f | n/a | 41.216.188.58:56001 | |
| 2025-05-24 10:34:32 | cd195cdc398181e90bf07661fa0dd6d6 | n/a | 41.216.188.58:56001 | |
| 2025-05-23 12:26:33 | f12ec9a61598c5b7fd9fbfe04489c6c7 | n/a | 41.216.188.58:56001 | |
| 2025-05-21 15:02:58 | d224879a044b4437bb3dad8b64da727e | n/a | 41.216.188.58:56001 | |
| 2025-05-11 09:33:23 | eb40504479f3d59a292bcf1a51eada1e | n/a | 41.216.188.58:56001 | |
| 2025-05-02 20:37:07 | bc2364683a01ab40cbebd4d4bb81e8b9 | n/a | 41.216.188.58:56002 | |
| 2025-04-16 12:02:26 | e14bf310da8d3efcad0d1d89659445ae | n/a | 41.216.183.10:56002 | |
| 2025-04-16 02:26:45 | b95e563f335e917e67c2f25b7ffaff20 | n/a | 41.216.183.10:56002 | |
| 2024-12-09 21:56:24 | 108b6783fb581f9f9ce33936379ee0cd | n/a | 88.99.161.62:56001 |
# of entries: 24 (max: 100)