SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint bb615528710a3ab6f2b17d212ea64ccd56c1ef64.
Database Entry
| SHA1 Fingerprint: | bb615528710a3ab6f2b17d212ea64ccd56c1ef64 |
|---|---|
| Certificate Common Name (CN): | nv.d.khabeir.com |
| Issuer Distinguished Name (DN): | E8 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-10-20 23:26:20 UTC |
| Last seen: | 2025-10-21 04:35:53 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2025-10-21 05:47:39 |
| Malware samples: | 5 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-10-21 04:35:53 | 1f1163c1328869254375ae4c758f5fd8 | n/a | 49.13.33.192:443 | |
| 2025-10-21 04:09:49 | 43c4c10e1bf981dc82593a19d730705e | n/a | 49.13.33.192:443 | |
| 2025-10-21 00:36:07 | ea8be3da8c9e42bab87e93c4697f79e3 | n/a | 49.13.33.192:443 | |
| 2025-10-21 00:28:29 | 26ee438ac45e2b64f7b9c99e40ba5a73 | n/a | 49.13.33.192:443 | |
| 2025-10-20 23:26:20 | 91fc722b2802baa21de11ca6060077f9 | n/a | 49.13.33.192:443 |
# of entries: 5 (max: 100)