SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint c28279e89eed09d15c697bb24609c93e3e72a3f1.
Database Entry
| SHA1 Fingerprint: | c28279e89eed09d15c697bb24609c93e3e72a3f1 |
|---|---|
| Certificate Common Name (CN): | SLLRaton |
| Issuer Distinguished Name (DN): | SLLRaton |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-02-13 07:23:40 UTC |
| Last seen: | 2026-02-17 02:59:31 UTC |
| Status: | Blacklisted |
| Listing reason: | RatonRAT C&C |
| Listing date: | 2026-02-23 19:38:21 |
| Malware samples: | 8 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-02-17 02:59:31 | 96c186bc45c607fb25c8d6bb72f513e9 | n/a | 23.160.168.174:2222 | |
| 2026-02-17 00:42:28 | ff794a3dcdf6e8c3747c1477551d2509 | n/a | 23.160.168.174:2222 | |
| 2026-02-17 00:17:47 | 2388e75505fb16f258bc27e1820c0506 | n/a | 23.160.168.174:2222 | |
| 2026-02-14 12:01:28 | c1ada5b3d7db34f3d4ece41e41c8a65e | n/a | 23.160.168.174:2222 | |
| 2026-02-14 11:22:41 | d4db169a4000f12b6e8cefbd91404da3 | n/a | 23.160.168.174:2222 | |
| 2026-02-13 09:53:56 | de6d259ce8ed4577cfc6591d3d8ccb82 | n/a | 23.160.168.174:2222 | |
| 2026-02-13 08:18:32 | 94fd434521bb819568ff444c3a79afa3 | n/a | 23.160.168.174:2222 | |
| 2026-02-13 07:23:40 | 1b92f2a5f57d401b7c843a131521f10f | n/a | 23.160.168.174:2222 |
# of entries: 8 (max: 100)