SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint c4c785aea2c1dfaab844c44f22a71e9c65296e79.

Database Entry

SHA1 Fingerprint:c4c785aea2c1dfaab844c44f22a71e9c65296e79
Certificate Common Name (CN):Orcus Server
Issuer Distinguished Name (DN):Orcus Server
TLS Version:TLSv1
First seen:2019-01-28 20:14:26 UTC
Last seen:2019-02-12 08:25:33 UTC
Status:Blacklisted
Listing reason:OrcusRAT C&C
Listing date:2019-01-28 20:20:14
Malware samples:4
Botnet C&Cs:2

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-02-12 08:25:330ab70f47f69c9449b58a18297a407b09Virustotal results 47/70 (67.14%) 140.82.48.224:3040
2019-02-12 08:25:330ab70f47f69c9449b58a18297a407b09Virustotal results 47/70 (67.14%) 140.82.48.224:3040
2019-02-11 23:22:327da04e6b1ecb162519fa6f4e8350572dVirustotal results 26/69 (37.68%) OrcusRAT 140.82.48.224:3040
2019-02-11 23:22:327da04e6b1ecb162519fa6f4e8350572dVirustotal results 26/69 (37.68%) OrcusRAT 140.82.48.224:3040
2019-02-04 21:42:55a1cc3dbcd2f46314a8c59a0fec21d4c1Virustotal results 41/70 (58.57%) OrcusRAT 140.82.48.224:3040
2019-02-04 21:42:55a1cc3dbcd2f46314a8c59a0fec21d4c1Virustotal results 41/70 (58.57%) OrcusRAT 140.82.48.224:3040
2019-01-28 20:14:260a1ee8328b433e07c8a920f4751cb8daVirustotal results 46/71 (64.79%) OrcusRAT 68.183.249.84:3040
2019-01-28 20:14:260a1ee8328b433e07c8a920f4751cb8daVirustotal results 46/71 (64.79%) OrcusRAT 68.183.249.84:3040

# of entries: 8 (max: 100)