SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint c086fac0d323a74755af2e663b0f57767c109de8.
Database Entry
| SHA1 Fingerprint: | c086fac0d323a74755af2e663b0f57767c109de8 |
|---|---|
| Certificate Common Name (CN): | goldenring.live |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-01-19 02:40:13 UTC |
| Last seen: | 2026-01-29 09:33:09 UTC |
| Status: | Blacklisted |
| Listing reason: | XillenStealer C&C |
| Listing date: | 2026-01-30 08:46:58 |
| Malware samples: | 10 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-01-29 09:33:09 | ddd1db10425778b06ebc9c2ed928bfa0 | n/a | 172.67.210.10:443 | |
| 2026-01-28 20:20:54 | d9c00f738a50c09c29463f2ec8e29f6d | n/a | 172.67.210.10:443 | |
| 2026-01-27 19:57:07 | bbf9639e55f47d86c249cc1c9f08ce7e | n/a | 104.21.50.197:443 | |
| 2026-01-24 14:21:41 | 049478789cbdd4776014d7bd93841b18 | n/a | 172.67.210.10:443 | |
| 2026-01-23 11:22:34 | bf482fb44c2e62a431a51fd1fe272561 | n/a | 172.67.210.10:443 | |
| 2026-01-20 09:46:06 | 2e07c9b853252029bb165adf0c5aa586 | n/a | 172.67.210.10:443 | |
| 2026-01-19 16:39:29 | 1dd3a46f8d5f6348cd3d5a830be9d335 | n/a | 104.21.50.197:443 | |
| 2026-01-19 07:44:34 | 0f15cbcd0ad723ac23e3aecd7dfbdc30 | n/a | 104.21.50.197:443 | |
| 2026-01-19 06:57:19 | 140ffcc3a1162ad8c384b7e7542a5be7 | n/a | 104.21.50.197:443 | |
| 2026-01-19 02:40:13 | 28ee1079edfa39d1a599002c8806b5a8 | n/a | 104.21.50.197:443 |
# of entries: 10 (max: 100)