SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b22eb2d8681247bcfc5153bf3a7bdaf511e55af5.

Database Entry


SHA1 Fingerprint:b22eb2d8681247bcfc5153bf3a7bdaf511e55af5
Certificate Common Name (CN):brendtsewai.gt
Issuer Distinguished Name (DN):brendtsewai.gt
TLS Version:TLSv1
First seen:2015-11-30 16:31:00 UTC
Last seen:2015-12-08 05:52:07 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-11-30 16:39:42
Malware samples:5
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-12-08 05:52:0768f89bf47f74e7804815aa800d4a385aVirustotal results 27/54 (50.00%) Dridex 42.117.2.85:443
2015-12-07 15:16:559b203d747a992990c75d610ae53adc6bVirustotal results 1/55 (1.82%) Dridex 42.117.2.85:443
2015-12-07 11:14:5544cbd39c6581342252ce1cdd238b2975Virustotal results 38/56 (67.86%) Dridex 42.117.2.85:443
2015-12-04 14:50:42048b5140b6fe2a84d69859667919d860Virustotal results 4/52 (7.69%) Dridex 200.49.169.94:444
2015-11-30 16:31:00f41c59b82e16c18b57bdd47844e53414Virustotal results 39/55 (70.91%) Dridex 42.117.2.85:443

# of entries: 5 (max: 100)