SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b821b99a945a8ab05a8518c4c1ec2f45f1ed6065.

Database Entry


SHA1 Fingerprint:b821b99a945a8ab05a8518c4c1ec2f45f1ed6065
Certificate Common Name (CN):bestylish.com/emailAddress=info@apmi.com
Issuer Distinguished Name (DN):Agency Protocols Management of Internet SSL CA
TLS Version:TLSv1
First seen:2015-10-27 20:04:20 UTC
Last seen:2016-05-29 19:57:39 UTC
Status:Blacklisted
Listing reason:Shifu C&C
Listing date:2015-11-26 11:55:42
Malware samples:23
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-05-29 19:57:39598521279a0ee41f1a49613d2c923ac3Virustotal results 38/57 (66.67%) Shifu69.64.50.99:443
2016-01-09 01:55:37a84dc8e5a23884262491a10f8a59b66aVirustotal results 22/56 (39.29%) Shifu69.64.50.99:443
2015-11-26 09:16:26d23c1445072cfedcf65c6ab280d8079fVirustotal results 28/56 (50.00%) Shifu69.64.50.99:443
2015-11-23 09:56:216fd888e901fdac7911b2afc59886f238Virustotal results 30/55 (54.55%) Shifu69.64.50.99:443
2015-11-17 10:49:37e3d2627b9e08ce620b1745fff5d17847Virustotal results 32/55 (58.18%) Shifu69.64.50.99:443
2015-11-17 09:28:36799ad6fc9c413c5bfaf4a6cf2264a585Virustotal results 32/56 (57.14%) Shifu69.64.50.99:443
2015-11-17 09:23:1222cf3f8d451b8131700076e4fa79af17Virustotal results 33/56 (58.93%) Shifu69.64.50.99:443
2015-11-17 07:47:1343388b43b4ffa92c85e6662241d0cad8Virustotal results 34/55 (61.82%) Shifu69.64.50.99:443
2015-11-16 06:26:0293aadf4489cf82125061949547babe64Virustotal results 30/54 (55.56%) Shifu69.64.50.99:443
2015-11-14 06:44:27893412f1ad26527f59c76a21c1ebe5b5Virustotal results 31/54 (57.41%) Shifu69.64.50.99:443
2015-11-10 13:57:562056e366bd5b7e233c279df66f1e2959Virustotal results 24/55 (43.64%) Shifu69.64.50.99:443
2015-11-09 19:21:4424c8db5c9b2b9ce476ed843fb7e88f67Virustotal results 22/55 (40.00%) Shifu69.64.50.99:443
2015-11-08 00:45:35d49eef0fd4ca12725e38102dcf2c7506Virustotal results 23/56 (41.07%) Shifu69.64.50.99:443
2015-11-07 19:31:3932b35aae8102687a9709ad3ac044e44eVirustotal results 18/46 (39.13%) Shifu69.64.50.99:443
2015-11-04 04:13:0655cfb1483baf09bdd082a7220df28094Virustotal results 25/56 (44.64%) Shifu69.64.50.99:443
2015-11-02 09:25:2580ecc4cc4962b1abba0dd42f93c5e94cVirustotal results 26/56 (46.43%) Shifu69.64.50.99:443
2015-11-01 12:08:28c6aff37468d34e9ff0db5a37919b7624Virustotal results 25/56 (44.64%) Shifu69.64.50.99:443
2015-11-01 05:35:015ef96eb1977854cdec2bef967e0a9306Virustotal results 24/56 (42.86%) Shifu69.64.50.99:443
2015-10-30 11:34:47b1548bc21dc819368ce7f7a0cad24de0Virustotal results 19/56 (33.93%) Shifu69.64.50.99:443
2015-10-29 18:17:279a752dadf34941f7e28e7b8fad8b23bdVirustotal results 24/55 (43.64%) Shifu69.64.50.99:443
2015-10-29 07:16:40f2677b2af4a2be41d14c9463e393ab50Virustotal results 19/55 (34.55%) Shifu69.64.50.99:443
2015-10-28 03:26:4376fb50dfb38718850a603ee6094751ffVirustotal results 18/55 (32.73%) Shifu69.64.50.99:443
2015-10-27 20:04:20501740b65b79f95bb7d9f19fa8bdc7b2Virustotal results 19/55 (34.55%) Shifu69.64.50.99:443

# of entries: 23 (max: 100)