SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint c6073630d49a7e3a5c45acade6e50ee5a1571944.

Database Entry


SHA1 Fingerprint:c6073630d49a7e3a5c45acade6e50ee5a1571944
Certificate Common Name (CN):WinScp
Issuer Distinguished Name (DN):WinScp
TLS Version:TLSv1' NOTBEFOR
First seen:2020-03-30 12:02:04 UTC
Last seen:2020-04-16 14:48:52 UTC
Status:Blacklisted
Listing reason:Malware C&C
Listing date:2020-03-30 12:31:17
Malware samples:12
Botnet C&Cs:5

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2020-04-16 14:48:52b240b17e71d77f71b78cfa056b3fafd6n/a194.5.97.14:6204
2020-04-16 13:51:01ff83aecae160c7e94cfea161fc13f78fn/aJBifrost 194.5.97.14:6204
2020-04-13 09:49:34440122466d1e4668ed6f7a44289ad40en/a45.125.239.247:6204
2020-04-13 00:38:369f98487368a547d3bded3779c6dadf7bn/a45.125.239.247:6204
2020-04-08 15:59:05b50369a956cfff0ced9779ffdfcae38an/a45.125.239.219:6204
2020-04-08 07:13:58e237330eca1e80aa79bf2e11553d567cn/a45.125.239.219:6204
2020-04-03 09:09:3337710bd8d19d4f0f8a45a155cd655ecen/a45.125.239.120:6204
2020-04-03 05:41:03050b592df80ba47c09bd4509b983f485n/a45.125.239.120:6204
2020-04-02 15:52:39a9fc9ea2a74b3c3229ae367091d5fc5bn/a45.125.239.120:6204
2020-04-02 08:46:49867e7aece6eebcdc17c0dcbbc61b6dbbn/a45.125.239.120:6204
2020-04-01 19:15:34fbf7acf58e8535b48b19e3da65f6eea2n/aAsyncRAT45.125.239.120:6204
2020-03-30 12:02:04ff36e15932fe7ab57e71a8c39cfe22c7n/a45.125.239.253:6204

# of entries: 12 (max: 100)