SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint bdb74ec221c2c45052d1c7b13ab921857b29c4e6.

Database Entry


SHA1 Fingerprint:bdb74ec221c2c45052d1c7b13ab921857b29c4e6
Certificate Common Name (CN):example.com
Issuer Distinguished Name (DN):example.com
TLS Version:TLS 1.2' NOTBEF
First seen:2018-12-05 10:59:25 UTC
Last seen:2018-12-10 22:17:22 UTC
Status:Blacklisted
Listing reason:TrickBot C&C
Listing date:2018-12-08 17:31:50
Malware samples:5
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-12-10 22:17:22c3dba01fbc2a5c4fc022ee7413b538adVirustotal results 29/70 (41.43%) Trickbot 82.146.56.170:447
2018-12-10 22:17:22c3dba01fbc2a5c4fc022ee7413b538adVirustotal results 29/70 (41.43%) Trickbot 82.146.56.170:447
2018-12-10 20:21:0394df3603fba467e0fff637c55c8b6d1bVirustotal results 41/69 (59.42%) TrickBot 82.146.56.170:447
2018-12-10 20:21:0394df3603fba467e0fff637c55c8b6d1bVirustotal results 41/69 (59.42%) TrickBot 82.146.56.170:447
2018-12-08 14:53:103f50efae9097cacd712ed7d73afbc479Virustotal results 37/69 (53.62%) TrickBot 82.146.56.170:447
2018-12-08 14:53:103f50efae9097cacd712ed7d73afbc479Virustotal results 37/69 (53.62%) TrickBot 82.146.56.170:447
2018-12-07 01:08:27b50da8567a5fa7ef9b0ebd175dfc934dVirustotal results 13/60 (21.67%) TrickBot 82.146.56.170:447
2018-12-07 01:08:27b50da8567a5fa7ef9b0ebd175dfc934dVirustotal results 13/60 (21.67%) TrickBot 82.146.56.170:447
2018-12-05 10:59:250ccc9f5825ddf9678df202c09e3e037aVirustotal results 8/69 (11.59%) TrickBot 82.146.56.170:447
2018-12-05 10:59:250ccc9f5825ddf9678df202c09e3e037aVirustotal results 8/69 (11.59%) TrickBot 82.146.56.170:447

# of entries: 10 (max: 100)