SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b66fd679bdcc361c3036b37ff1830c7e18e25804.

Database Entry


SHA1 Fingerprint:b66fd679bdcc361c3036b37ff1830c7e18e25804
Certificate Common Name (CN):Orcus Server
Issuer Distinguished Name (DN):Orcus Server
TLS Version:TLSv1
First seen:2019-09-04 18:11:00 UTC
Last seen:2019-09-09 12:14:35 UTC
Status:Blacklisted
Listing reason:OrcusRAT C&C
Listing date:2019-09-09 05:30:18
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-09-09 12:14:352769f42634a0e87c53d616b0c7afffb7Virustotal results 16 / 69 (23.19%) OrcusRAT 195.128.126.234:10134
2019-09-09 05:19:44508ccfc1a3feb0afc3458222cc19178bn/aOrcusRAT 195.128.126.234:10134
2019-09-04 18:11:0082ab5d304ef2e47993293ed1cb421beeVirustotal results 21 / 68 (30.88%) OrcusRAT 195.128.126.234:10134

# of entries: 3 (max: 100)