SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint bebb7cda0610e6204f2941c379233ac122aab973.

Database Entry

SHA1 Fingerprint:bebb7cda0610e6204f2941c379233ac122aab973
Certificate Common Name (CN):example.com
Issuer Distinguished Name (DN):example.com
TLS Version:TLS 1.2
First seen:2018-04-06 18:36:27 UTC
Last seen:2018-04-08 15:07:44 UTC
Status:Blacklisted
Listing reason:TrickBot C&C
Listing date:2018-04-07 15:11:49
Malware samples:2
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-04-08 15:07:446773d8c57380df6424081bad5a7311acVirustotal results 32/67 (47.76%) TrickBot 95.213.235.54:443
2018-04-08 15:07:446773d8c57380df6424081bad5a7311acVirustotal results 32/67 (47.76%) TrickBot 95.213.235.54:443
2018-04-08 15:07:446773d8c57380df6424081bad5a7311acVirustotal results 32/67 (47.76%) TrickBot 95.213.235.54:443
2018-04-08 15:07:446773d8c57380df6424081bad5a7311acVirustotal results 32/67 (47.76%) TrickBot 95.213.235.54:443
2018-04-06 18:36:27c4634916686ad740e1d17f23721152e2Virustotal results 37/67 (55.22%) TrickBot 95.213.235.54:443
2018-04-06 18:36:27c4634916686ad740e1d17f23721152e2Virustotal results 37/67 (55.22%) TrickBot 95.213.235.54:443
2018-04-06 18:36:27c4634916686ad740e1d17f23721152e2Virustotal results 37/67 (55.22%) TrickBot 95.213.235.54:443
2018-04-06 18:36:27c4634916686ad740e1d17f23721152e2Virustotal results 37/67 (55.22%) TrickBot 95.213.235.54:443

# of entries: 8 (max: 100)