SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b3ff91c310bf2b6873c90bfc870806ef4eaec49a.

Database Entry


SHA1 Fingerprint:b3ff91c310bf2b6873c90bfc870806ef4eaec49a
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-04-30 03:47:56 UTC
Last seen:2014-05-16 18:59:48 UTC
Status:Blacklisted
Listing reason:Shylock C&C
Listing date:2014-05-04 08:24:30
Malware samples:19
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-05-16 18:59:480c0ba7da3f9e053e76ce56c751071dedVirustotal results 29/53 (54.72%) Shylock 37.123.99.15:443
2014-05-16 03:09:3461573941e9ff02c771e0ff393703ca50Virustotal results 29/52 (55.77%) Shylock 37.123.99.15:443
2014-05-15 05:59:03dc7011f12fc8e64325f6d4f5b52b29b9n/aShylock 37.123.99.15:443
2014-05-13 14:23:18a0ecc4c84337ec2d44bc3e83ebb62e73Virustotal results 2/51 (3.92%) Shylock 37.123.99.15:443
2014-05-13 08:19:41821f1a38c283a18754b6990a93aefda5Virustotal results 20/52 (38.46%) Shylock 37.123.99.15:443
2014-05-12 04:07:318562a49d4d6f3b4c1c0dbc8614509568Virustotal results 5/52 (9.62%) Shylock 37.123.99.15:443
2014-05-10 14:46:18be33a982459d6828a4e455663bff4a6dVirustotal results 22/53 (41.51%) Shylock 37.123.99.15:443
2014-05-10 10:20:46bf71238a25998315f5027ffa1b6a2b04n/aShylock 37.123.99.15:443
2014-05-09 08:39:37d04ddef244da5d72f2882d0c69240664Virustotal results 2/51 (3.92%) Shylock 37.123.99.15:443
2014-05-07 15:22:4689bccc2cc1940728c17bca3f4f39f8acVirustotal results 26/52 (50.00%) Shylock 37.123.99.15:443
2014-05-07 10:39:245ca01c8f26c1a6e6c6af71a330a7fb2cVirustotal results 6/52 (11.54%) Shylock 37.123.99.15:443
2014-05-07 10:29:31cf996af0a46b3e014b841c6dee33b29bVirustotal results 14/51 (27.45%) Shylock 37.123.99.15:443
2014-05-07 09:31:44e5940f0ec7cbe177d6e8c82abea85a87Virustotal results 18/52 (34.62%) Shylock 37.123.99.15:443
2014-05-05 14:19:43ccff80f30ae93f58464d41b2694659cfVirustotal results 13/52 (25.00%) Shylock 37.123.99.15:443
2014-05-05 06:36:048f5cb962b5582508b423e99ba48a5546Virustotal results 1/52 (1.92%) Shylock 37.123.99.15:443
2014-05-04 19:23:38b40f77595c702c596bf9db24125ffbc7Virustotal results 7/51 (13.73%) Shylock 37.123.99.15:443
2014-05-02 19:09:295b0a7ae383dd269f0c204f58bceeee0dVirustotal results 16/52 (30.77%) Shylock 37.123.99.15:443
2014-04-30 14:40:4457e5929bcac4b198538512cafe6fb2f5Virustotal results 19/52 (36.54%) Shylock 37.123.99.15:443
2014-04-30 03:47:5661604991a6519da75a0a576bb797bf01Virustotal results 2/51 (3.92%) Shylock 37.123.99.15:443

# of entries: 19 (max: 100)