SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b66fd679bdcc361c3036b37ff1830c7e18e25804.

Database Entry

SHA1 Fingerprint:b66fd679bdcc361c3036b37ff1830c7e18e25804
Certificate Common Name (CN):Orcus Server
Issuer Distinguished Name (DN):Orcus Server
TLS Version:TLSv1
First seen:2019-09-04 18:11:00 UTC
Last seen:2019-09-09 12:14:35 UTC
Status:Blacklisted
Listing reason:OrcusRAT C&C
Listing date:2019-09-09 05:30:18
Malware samples:3
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-09-09 12:14:352769f42634a0e87c53d616b0c7afffb7Virustotal results 16 / 69 (23.19%) OrcusRAT 195.128.126.234:10134
2019-09-09 12:14:352769f42634a0e87c53d616b0c7afffb7Virustotal results 16 / 69 (23.19%) OrcusRAT 195.128.126.234:10134
2019-09-09 05:19:44508ccfc1a3feb0afc3458222cc19178bVirustotal results 37/65 (56.92%) OrcusRAT 195.128.126.234:10134
2019-09-09 05:19:44508ccfc1a3feb0afc3458222cc19178bVirustotal results 37/65 (56.92%) OrcusRAT 195.128.126.234:10134
2019-09-04 18:11:0082ab5d304ef2e47993293ed1cb421beeVirustotal results 21 / 68 (30.88%) OrcusRAT 195.128.126.234:10134
2019-09-04 18:11:0082ab5d304ef2e47993293ed1cb421beeVirustotal results 21 / 68 (30.88%) OrcusRAT 195.128.126.234:10134

# of entries: 6 (max: 100)