SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b2b918b6a030df782d9beda355d2c563104ffe51.
Database Entry
| SHA1 Fingerprint: | b2b918b6a030df782d9beda355d2c563104ffe51 |
|---|---|
| Certificate Common Name (CN): | aykjs yrwa |
| Issuer Distinguished Name (DN): | aykjs yrwa |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-06-27 07:41:01 UTC |
| Last seen: | 2025-07-12 04:25:00 UTC |
| Status: | Blacklisted |
| Listing reason: | QuasarRAT C&C |
| Listing date: | 2025-06-28 14:04:35 |
| Malware samples: | 6 |
| Botnet C&Cs: | 4 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-07-12 04:25:00 | b6ce26b4d911bc810e5147da085b1066 | n/a | 147.185.221.18:35378 | |
| 2025-07-11 08:21:07 | a3dbee56348a7ee1a14fcb89999eee68 | n/a | 147.185.221.18:35378 | |
| 2025-07-07 18:07:16 | ff48d0aa722e58eb7f7248dadb7e9d50 | n/a | 87.120.186.37:57480 | |
| 2025-07-04 04:27:50 | ce172e194f54260fd7b50c7fd420c684 | n/a | 94.156.114.219:57480 | |
| 2025-07-04 02:53:51 | 192cb62862d9c0efa3bcf2ff06c01f1b | n/a | 94.156.114.219:57480 | |
| 2025-06-27 07:41:01 | 730027a5340d7a5796d780fd9510fff3 | n/a | 87.120.84.39:54780 |
# of entries: 6 (max: 100)