SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b08a4939fb88f375a2757eaddc47b1fb8b554439.
Database Entry
SHA1 Fingerprint: | b08a4939fb88f375a2757eaddc47b1fb8b554439 |
---|---|
Certificate Common Name (CN): | localhost |
Issuer Distinguished Name (DN): | localhost |
TLS Version: | SSLv3 |
First seen: | 2014-05-04 03:46:33 UTC |
Last seen: | 2014-05-13 08:19:41 UTC |
Status: | Blacklisted |
Listing reason: | Shylock C&C |
Listing date: | 2014-05-04 08:09:56 |
Malware samples: | 11 |
Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
---|---|---|---|---|
2014-05-13 08:19:41 | 821f1a38c283a18754b6990a93aefda5 | 20/52 (38.46%) | Shylock | 198.61.231.19:443 |
2014-05-13 08:19:41 | 821f1a38c283a18754b6990a93aefda5 | 20/52 (38.46%) | Shylock | 198.61.231.19:443 |
2014-05-12 04:07:31 | 8562a49d4d6f3b4c1c0dbc8614509568 | 5/52 (9.62%) | Shylock | 198.61.231.19:443 |
2014-05-12 04:07:31 | 8562a49d4d6f3b4c1c0dbc8614509568 | 5/52 (9.62%) | Shylock | 198.61.231.19:443 |
2014-05-12 01:51:00 | 0965d869ff5fd221e2eb4da3e0d5d7b4 | 2/52 (3.85%) | Shylock | 198.61.231.19:443 |
2014-05-12 01:51:00 | 0965d869ff5fd221e2eb4da3e0d5d7b4 | 2/52 (3.85%) | Shylock | 198.61.231.19:443 |
2014-05-11 22:32:12 | ecd01357797485d3d61397723f68feb4 | 3/52 (5.77%) | Shylock | 198.61.231.19:443 |
2014-05-11 22:32:12 | ecd01357797485d3d61397723f68feb4 | 3/52 (5.77%) | Shylock | 198.61.231.19:443 |
2014-05-11 12:37:57 | 915cd4b8a99c9fee9d6061c50bceca68 | 28/53 (52.83%) | Shylock | 198.61.231.19:443 |
2014-05-11 12:37:57 | 915cd4b8a99c9fee9d6061c50bceca68 | 28/53 (52.83%) | Shylock | 198.61.231.19:443 |
2014-05-09 09:14:40 | 51f603cb7afc197e58ca30597b87dbb6 | 2/52 (3.85%) | Shylock | 198.61.231.19:443 |
2014-05-09 09:14:40 | 51f603cb7afc197e58ca30597b87dbb6 | 2/52 (3.85%) | Shylock | 198.61.231.19:443 |
2014-05-08 13:42:21 | 9d18d9fe764f1fa6f192b22d5ffa413a | 2/50 (4.00%) | Shylock | 198.61.231.19:443 |
2014-05-08 13:42:21 | 9d18d9fe764f1fa6f192b22d5ffa413a | 2/50 (4.00%) | Shylock | 198.61.231.19:443 |
2014-05-08 09:33:05 | bdc1398c1c39f0bf21090eb9c96a39f2 | 4/38 (10.53%) | Shylock | 198.61.231.19:443 |
2014-05-08 09:33:05 | bdc1398c1c39f0bf21090eb9c96a39f2 | 4/38 (10.53%) | Shylock | 198.61.231.19:443 |
2014-05-08 01:23:05 | a6f6a1ca2ae01a123fd956aff042fdd6 | 2/51 (3.92%) | Shylock | 198.61.231.19:443 |
2014-05-08 01:23:05 | a6f6a1ca2ae01a123fd956aff042fdd6 | 2/51 (3.92%) | Shylock | 198.61.231.19:443 |
2014-05-05 08:23:35 | 9498a0c3b7a18acfdc0640a1c75b45ca | 32/53 (60.38%) | Shylock | 198.61.231.19:443 |
2014-05-05 08:23:35 | 9498a0c3b7a18acfdc0640a1c75b45ca | 32/53 (60.38%) | Shylock | 198.61.231.19:443 |
2014-05-04 03:46:33 | 429c581313a5f678335745279076dd2d | 22/52 (42.31%) | Shylock | 198.61.231.19:443 |
2014-05-04 03:46:33 | 429c581313a5f678335745279076dd2d | 22/52 (42.31%) | Shylock | 198.61.231.19:443 |
# of entries: 22 (max: 100)