SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b05166f5429ec47c2d582337a043bb23986724ab.
Database Entry
| SHA1 Fingerprint: | b05166f5429ec47c2d582337a043bb23986724ab |
|---|---|
| Certificate Common Name (CN): | redwelt.com |
| Issuer Distinguished Name (DN): | Sectigo RSA Domain Validation Secure Server CA |
| TLS Version: | TLS 1.2 |
| First seen: | 2021-02-25 11:04:02 UTC |
| Last seen: | 2021-02-25 14:18:42 UTC |
| Status: | Blacklisted |
| Listing reason: | CobaltStrike C&C |
| Listing date: | 2021-02-25 14:25:31 |
| Malware samples: | 2 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-02-25 14:18:42 | 93498547113a518da19d5d7b38599e82 | n/a | CobaltStrike | 172.93.201.100:443 |
| 2021-02-25 14:18:42 | 93498547113a518da19d5d7b38599e82 | n/a | CobaltStrike | 172.93.201.100:443 |
| 2021-02-25 11:04:02 | d84d83da2fd80a1bd976615f76a0abc5 |  2 / 68 (2.94%)
| CobaltStrike | 172.93.201.100:443 |
| 2021-02-25 11:04:02 | d84d83da2fd80a1bd976615f76a0abc5 | 2 / 68 (2.94%)
| CobaltStrike | 172.93.201.100:443 |
# of entries: 4 (max: 100)