SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b746722ee79737ac8a6c97c3655f147b9259ec98.
Database Entry
| SHA1 Fingerprint: | b746722ee79737ac8a6c97c3655f147b9259ec98 |
|---|---|
| Certificate Common Name (CN): | thalic-tide-turn.pro |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-08-06 18:36:01 UTC |
| Last seen: | 2025-08-19 15:22:05 UTC |
| Status: | Blacklisted |
| Listing reason: | DeerStealer C&C |
| Listing date: | 2025-08-06 19:43:43 |
| Malware samples: | 13 |
| Botnet C&Cs: | 7 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-08-19 15:22:05 | 101ca09eb18fab2778c4684e2fa7b4de | n/a | 188.114.96.7:443 | |
| 2025-08-16 07:47:52 | b31db056c978934245b1e5b47b4a3f0e | n/a | 188.114.97.7:443 | |
| 2025-08-12 04:56:40 | e468fff11b549b11c889c92acdba3f02 | n/a | 188.114.96.7:443 | |
| 2025-08-12 01:55:28 | d336163bd13a08f34452576db53acc54 | n/a | 188.114.96.7:443 | |
| 2025-08-11 16:31:23 | 9870c143f30ec71a188afcb1065a114f | n/a | 188.114.96.3:443 | |
| 2025-08-07 19:57:38 | 0a3a4b8f36a4d9c5a94545f725ff068c | n/a | 188.114.96.7:443 | |
| 2025-08-07 18:39:49 | 280355ac27bb6445f3526fa2ab67ed0f | n/a | 104.21.1.82:443 | |
| 2025-08-07 18:13:33 | 021c0e71c2fc6336f3237172a764d121 | n/a | 188.114.97.7:443 | |
| 2025-08-07 15:52:24 | 2559f57e56a1e15fc2e007018938c8a8 | n/a | 188.114.97.0:443 | |
| 2025-08-07 15:33:25 | c7fc0c2db7eb95ab6fbb81515e4af24c | n/a | 188.114.96.7:443 | |
| 2025-08-07 14:47:05 | c6d9810c6c4c94d02cb21458a047c616 | n/a | 188.114.96.2:443 | |
| 2025-08-06 23:26:22 | ab7d8f307767638ee6ed462c191b8923 | n/a | 188.114.97.0:443 | |
| 2025-08-06 18:36:01 | 4fe27c9593b078661eec08c795217ed0 | n/a | 188.114.96.0:443 |
# of entries: 13 (max: 100)