SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b11e5db4da0a1eb419ec3d14443b10616daa0233.

Database Entry

SHA1 Fingerprint:	b11e5db4da0a1eb419ec3d14443b10616daa0233
Certificate Common Name (CN):	localhost
Issuer Distinguished Name (DN):	localhost
TLS Version:	TLSv1
First seen:	2016-05-06 10:29:06 UTC
Last seen:	2016-07-17 14:03:01 UTC
Status:	Blacklisted
Listing reason:	Shylock C&C
Listing date:	2016-05-17 14:48:39
Malware samples:	107
Botnet C&Cs:	1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Signature	Botnet C&C (IP:port)
2016-07-17 14:03:01	a82f8c331c146be1204ec3d6559559ff	n/a	Shylock	182.23.64.182:80
2016-07-17 14:03:01	a82f8c331c146be1204ec3d6559559ff	n/a	Shylock	182.23.64.182:80
2016-07-17 07:16:33	a12589aa541276920df09c8412d05a49	45/64 (70.31%)	Shylock	182.23.64.182:80
2016-07-17 07:16:33	a12589aa541276920df09c8412d05a49	45/64 (70.31%)	Shylock	182.23.64.182:80
2016-07-16 08:04:00	fcd1d5b9ffdaa5d07d3c742237e3dd9e	n/a	Shylock	182.23.64.182:80
2016-07-16 08:04:00	fcd1d5b9ffdaa5d07d3c742237e3dd9e	n/a	Shylock	182.23.64.182:80
2016-07-16 07:34:28	7d1c89b6defff9956972379d0e2c57ea	n/a	Shylock	182.23.64.182:80
2016-07-16 07:34:28	7d1c89b6defff9956972379d0e2c57ea	n/a	Shylock	182.23.64.182:80
2016-07-15 23:50:03	798853ead9bb0d5be4e277fbf8b20bf0	n/a	Shylock	182.23.64.182:80
2016-07-15 23:50:03	798853ead9bb0d5be4e277fbf8b20bf0	n/a	Shylock	182.23.64.182:80
2016-07-15 18:16:52	53592b6ca2d1d21075ba6795aef758d4	n/a	Shylock	182.23.64.182:80
2016-07-15 18:16:52	53592b6ca2d1d21075ba6795aef758d4	n/a	Shylock	182.23.64.182:80
2016-07-15 18:12:24	15366699c1ed224dc223d81d416cf6a2	n/a	Shylock	182.23.64.182:80
2016-07-15 18:12:24	15366699c1ed224dc223d81d416cf6a2	n/a	Shylock	182.23.64.182:80
2016-07-15 17:58:16	cc5a3bb6e6f22fa91418ad5c32daa787	n/a	Shylock	182.23.64.182:80
2016-07-15 17:58:16	cc5a3bb6e6f22fa91418ad5c32daa787	n/a	Shylock	182.23.64.182:80
2016-07-15 16:56:30	d9537e8bdfa2cea8858ff0d9a231258c	n/a	Shylock	182.23.64.182:80
2016-07-15 16:56:30	d9537e8bdfa2cea8858ff0d9a231258c	n/a	Shylock	182.23.64.182:80
2016-07-15 15:49:05	26fe94ee5424cf264b6b3b71147c22b7	n/a	Shylock	182.23.64.182:80
2016-07-15 15:49:05	26fe94ee5424cf264b6b3b71147c22b7	n/a	Shylock	182.23.64.182:80
2016-07-15 09:50:59	d13f10754ac9f0d1cef40063262898c1	n/a	Gootkit	182.23.64.182:80
2016-07-15 09:50:59	d13f10754ac9f0d1cef40063262898c1	n/a	Gootkit	182.23.64.182:80
2016-07-15 03:11:16	d9fb4cb2ca5a854f9aa49659922ae5f8	n/a	Shylock	182.23.64.182:80
2016-07-15 03:11:16	d9fb4cb2ca5a854f9aa49659922ae5f8	n/a	Shylock	182.23.64.182:80
2016-07-15 03:06:30	29e0c558b756f37fe5ffff687e8e80eb	n/a	Shylock	182.23.64.182:80
2016-07-15 03:06:30	29e0c558b756f37fe5ffff687e8e80eb	n/a	Shylock	182.23.64.182:80
2016-07-15 01:44:41	75bc09583b34920678a5021591afd848	n/a	Gootkit	182.23.64.182:80
2016-07-15 01:44:41	75bc09583b34920678a5021591afd848	n/a	Gootkit	182.23.64.182:80
2016-07-13 20:47:05	fda721d70b43dc8097a54a1f87dfc905	n/a	Shylock	182.23.64.182:80
2016-07-13 20:47:05	fda721d70b43dc8097a54a1f87dfc905	n/a	Shylock	182.23.64.182:80
2016-07-12 20:05:36	4c053a3ae1561744c8502b99a250e9fc	n/a	Gootkit	182.23.64.182:80
2016-07-12 20:05:36	4c053a3ae1561744c8502b99a250e9fc	n/a	Gootkit	182.23.64.182:80
2016-07-11 17:30:46	ac5c12e98f318f06641d08de56c03c80	n/a	Shylock	182.23.64.182:80
2016-07-11 17:30:46	ac5c12e98f318f06641d08de56c03c80	n/a	Shylock	182.23.64.182:80
2016-07-11 16:10:34	428438e6ef97c37c864e24d9a201f0c9	n/a	Shylock	182.23.64.182:80
2016-07-11 16:10:34	428438e6ef97c37c864e24d9a201f0c9	n/a	Shylock	182.23.64.182:80
2016-07-11 00:00:25	7ca306d0bba6989d146dddecdba37cd4	n/a	Shylock	182.23.64.182:80
2016-07-11 00:00:25	7ca306d0bba6989d146dddecdba37cd4	n/a	Shylock	182.23.64.182:80
2016-07-10 18:44:07	1ef90a9093339e367ee047f22094c5ee	n/a	Gootkit	182.23.64.182:80
2016-07-10 18:44:07	1ef90a9093339e367ee047f22094c5ee	n/a	Gootkit	182.23.64.182:80
2016-07-09 21:13:29	666136fbce0ae9f7900bf8c2325bdeb5	13/55 (23.64%)	Shylock	182.23.64.182:80
2016-07-09 21:13:29	666136fbce0ae9f7900bf8c2325bdeb5	13/55 (23.64%)	Shylock	182.23.64.182:80
2016-07-09 20:35:22	f307789a3f3d47137fffcb52b9fb78c3	5/54 (9.26%)	Shylock	182.23.64.182:80
2016-07-09 20:35:22	f307789a3f3d47137fffcb52b9fb78c3	5/54 (9.26%)	Shylock	182.23.64.182:80
2016-07-09 18:56:01	63551adfadf030e8685694008a6cb4ea	n/a	Shylock	182.23.64.182:80
2016-07-09 18:56:01	63551adfadf030e8685694008a6cb4ea	n/a	Shylock	182.23.64.182:80
2016-07-09 00:47:37	7d3f194c36c2e0a8445686e60e3890fb	n/a	Shylock	182.23.64.182:80
2016-07-09 00:47:37	7d3f194c36c2e0a8445686e60e3890fb	n/a	Shylock	182.23.64.182:80
2016-07-09 00:24:32	95cd84cc0b8789751a831ac0b38e34e4	39/56 (69.64%)	Gootkit	182.23.64.182:80
2016-07-09 00:24:32	95cd84cc0b8789751a831ac0b38e34e4	39/56 (69.64%)	Gootkit	182.23.64.182:80
2016-07-08 17:24:37	b85a700a096afd0e3628070f63df53b9	42/56 (75.00%)	Shylock	182.23.64.182:80
2016-07-08 17:24:37	b85a700a096afd0e3628070f63df53b9	42/56 (75.00%)	Shylock	182.23.64.182:80
2016-07-08 08:55:35	27b5116c41c96fc2fc19117ba3fcc6c1	33/56 (58.93%)	Shylock	182.23.64.182:80
2016-07-08 08:55:35	27b5116c41c96fc2fc19117ba3fcc6c1	33/56 (58.93%)	Shylock	182.23.64.182:80
2016-07-08 08:32:09	e5310634668be867cb9ecc11c386ceba	n/a	Shylock	182.23.64.182:80
2016-07-08 08:32:09	e5310634668be867cb9ecc11c386ceba	n/a	Shylock	182.23.64.182:80
2016-07-07 11:14:39	990f804a7123334f127093054082f0b4	41/57 (71.93%)	Shylock	182.23.64.182:80
2016-07-07 11:14:39	990f804a7123334f127093054082f0b4	41/57 (71.93%)	Shylock	182.23.64.182:80
2016-07-07 01:18:12	00fbc0d113685e97b08a329fbb24a3e0	n/a	Shylock	182.23.64.182:80
2016-07-07 01:18:12	00fbc0d113685e97b08a329fbb24a3e0	n/a	Shylock	182.23.64.182:80
2016-07-06 23:48:14	9b595e6485f36c3c1029bcd42d53b2a6	n/a	Shylock	182.23.64.182:80
2016-07-06 23:48:14	9b595e6485f36c3c1029bcd42d53b2a6	n/a	Shylock	182.23.64.182:80
2016-07-05 22:41:08	727cb6523af2d1513700a4cee03f353e	n/a	Shylock	182.23.64.182:80
2016-07-05 22:41:08	727cb6523af2d1513700a4cee03f353e	n/a	Shylock	182.23.64.182:80
2016-07-05 14:38:17	53235a9f206d07c12bd99f04fd4f0948	36/56 (64.29%)	Shylock	182.23.64.182:80
2016-07-05 14:38:17	53235a9f206d07c12bd99f04fd4f0948	36/56 (64.29%)	Shylock	182.23.64.182:80
2016-07-05 09:29:41	865edcca33631fa14d1e47ac0c2e8478	34/54 (62.96%)	Shylock	182.23.64.182:80
2016-07-05 09:29:41	865edcca33631fa14d1e47ac0c2e8478	34/54 (62.96%)	Shylock	182.23.64.182:80
2016-07-05 01:34:53	e40c8c6f38328bcb1572e8fdd4e7aeba	n/a	Shylock	182.23.64.182:80
2016-07-05 01:34:53	e40c8c6f38328bcb1572e8fdd4e7aeba	n/a	Shylock	182.23.64.182:80
2016-07-04 19:30:39	0722628771a9503675cf73eb5cc444b0	53/67 (79.10%)	Shylock	182.23.64.182:80
2016-07-04 19:30:39	0722628771a9503675cf73eb5cc444b0	53/67 (79.10%)	Shylock	182.23.64.182:80
2016-07-04 06:27:19	cb1221fe5b0d8a058d4753eb286a5770	n/a	Shylock	182.23.64.182:80
2016-07-04 06:27:19	cb1221fe5b0d8a058d4753eb286a5770	n/a	Shylock	182.23.64.182:80
2016-07-04 06:24:11	3721cab949ecbe42dd41000c19e36289	n/a	Shylock	182.23.64.182:80
2016-07-04 06:24:11	3721cab949ecbe42dd41000c19e36289	n/a	Shylock	182.23.64.182:80
2016-07-04 04:22:45	4a1503211611a82e7083f981a442ab4f	4/53 (7.55%)	Shylock	182.23.64.182:80
2016-07-04 04:22:45	4a1503211611a82e7083f981a442ab4f	4/53 (7.55%)	Shylock	182.23.64.182:80
2016-07-04 02:08:56	3b271465d19c92384a666f7bddf2be4a	n/a	Shylock	182.23.64.182:80
2016-07-04 02:08:56	3b271465d19c92384a666f7bddf2be4a	n/a	Shylock	182.23.64.182:80
2016-07-03 12:55:27	150b9737af6dca8c437d2b058b9ed09d	n/a	Shylock	182.23.64.182:80
2016-07-03 12:55:27	150b9737af6dca8c437d2b058b9ed09d	n/a	Shylock	182.23.64.182:80
2016-07-03 00:00:05	5ec1f9739a273367ecf404f7b5889aca	n/a	Shylock	182.23.64.182:80
2016-07-03 00:00:05	5ec1f9739a273367ecf404f7b5889aca	n/a	Shylock	182.23.64.182:80
2016-06-28 16:27:07	8226a0b961a4d65de33c68697ef24d87	n/a	Shylock	182.23.64.182:80
2016-06-28 16:27:07	8226a0b961a4d65de33c68697ef24d87	n/a	Shylock	182.23.64.182:80
2016-06-28 13:50:04	d2d9015f3b1bcd7f017b8d5f25c407ba	n/a	Shylock	182.23.64.182:80
2016-06-28 13:50:04	d2d9015f3b1bcd7f017b8d5f25c407ba	n/a	Shylock	182.23.64.182:80
2016-06-27 20:42:51	b92365b87c43e43242ea53aa40766642	33/56 (58.93%)	Shylock	182.23.64.182:80
2016-06-27 20:42:51	b92365b87c43e43242ea53aa40766642	33/56 (58.93%)	Shylock	182.23.64.182:80
2016-06-21 05:45:59	5b93871b00699f51a41d2875d06e1abc	36/56 (64.29%)	Shylock	182.23.64.182:80
2016-06-21 05:45:59	5b93871b00699f51a41d2875d06e1abc	36/56 (64.29%)	Shylock	182.23.64.182:80
2016-06-19 17:09:19	a4dd32575301699387c0032a0c0a7baf	38/68 (55.88%)	Shylock	182.23.64.182:80
2016-06-19 17:09:19	a4dd32575301699387c0032a0c0a7baf	38/68 (55.88%)	Shylock	182.23.64.182:80
2016-06-19 11:57:21	43ac343f254ea6832155167bbf7c32b2	n/a	Shylock	182.23.64.182:80
2016-06-19 11:57:21	43ac343f254ea6832155167bbf7c32b2	n/a	Shylock	182.23.64.182:80
2016-06-17 19:44:12	806a8388ec1c11f0ca7af275ee77d3f5	n/a	Shylock	182.23.64.182:80
2016-06-17 19:44:12	806a8388ec1c11f0ca7af275ee77d3f5	n/a	Shylock	182.23.64.182:80
2016-06-17 13:09:18	0a4163bfd01ec76858f9c5b26a449207	n/a	Gootkit	182.23.64.182:80
2016-06-17 13:09:18	0a4163bfd01ec76858f9c5b26a449207	n/a	Gootkit	182.23.64.182:80

# of entries: 100 (max: 100)