SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b0407930dcd7c38615c8e660c4d39121375b1172.

Database Entry

SHA1 Fingerprint:	b0407930dcd7c38615c8e660c4d39121375b1172
Certificate Common Name (CN):	AsyncRAT Server CA
Issuer Distinguished Name (DN):	AsyncRAT Server CA
TLS Version:	TLSv1' NOTBEFOR
First seen:	2019-06-24 05:22:33 UTC
Last seen:	2020-05-17 03:29:51 UTC
Status:	Blacklisted
Listing reason:	AsyncRAT C&C
Listing date:	2019-08-19 17:54:41
Malware samples:	6
Botnet C&Cs:	3

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Signature	Botnet C&C (IP:port)
2020-05-17 03:29:51	a34cdb26e6c52b22741b4f2b3aebd35d	37 / 71 (52.11%)	AsyncRAT	79.134.225.102:6606
2020-05-17 03:29:51	a34cdb26e6c52b22741b4f2b3aebd35d	37 / 71 (52.11%)	AsyncRAT	79.134.225.102:6606
2019-08-20 09:24:33	12a25ea65d762c9e289eb6c2b8a01a86	21 / 69 (30.43%)	RemcosRAT	185.244.31.92:9341
2019-08-20 09:24:33	12a25ea65d762c9e289eb6c2b8a01a86	21 / 69 (30.43%)	RemcosRAT	185.244.31.92:9341
2019-08-19 17:26:03	a311cb3ef729c23349888b2213097695	42 / 69 (60.87%)	AsyncRAT	185.244.31.92:9341
2019-08-19 17:26:03	a311cb3ef729c23349888b2213097695	42 / 69 (60.87%)	AsyncRAT	185.244.31.92:9341
2019-08-19 15:21:36	a2c8fd26d524fb11b20972ba8cb9d6bc	31 / 66 (46.97%)	RemcosRAT	185.244.31.92:9341
2019-08-19 15:21:36	a2c8fd26d524fb11b20972ba8cb9d6bc	31 / 66 (46.97%)	RemcosRAT	185.244.31.92:9341
2019-08-17 11:15:03	7494fe51ec048544f2f5d56b469cae49	41 / 70 (58.57%)	RemcosRAT	185.244.31.92:9341
2019-08-17 11:15:03	7494fe51ec048544f2f5d56b469cae49	41 / 70 (58.57%)	RemcosRAT	185.244.31.92:9341
2019-06-24 05:22:33	94cc784cd6ab459d61872e6f2accb04d	14/71 (19.72%)	RemcosRAT	93.90.193.189:9341
2019-06-24 05:22:33	94cc784cd6ab459d61872e6f2accb04d	14/71 (19.72%)	RemcosRAT	93.90.193.189:9341

# of entries: 12 (max: 100)