SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint c701fa6cfebc577a6c20f7745c85a9938507b8a3.

Database Entry

SHA1 Fingerprint:c701fa6cfebc577a6c20f7745c85a9938507b8a3
Certificate Common Name (CN):C=US, ST=Denial, L=Springfield, O=Dis
Issuer Distinguished Name (DN):C=US, ST=Denial, L=Springfield, O=Dis
TLS Version:TLS 1.2
First seen:2016-10-23 06:09:09 UTC
Last seen:2016-10-24 06:35:07 UTC
Status:Blacklisted
Listing reason:TorrentLocker C&C
Listing date:2016-10-24 14:28:49
Malware samples:3
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-10-24 06:35:07c41e2c95c3d8579a11b3d80e2323dfc1Virustotal results 29/56 (51.79%) TorrentLocker 37.48.106.49:443
2016-10-24 06:35:07c41e2c95c3d8579a11b3d80e2323dfc1Virustotal results 29/56 (51.79%) TorrentLocker 37.48.106.49:443
2016-10-23 11:48:0493fe50a496a208fd8976dc31e8bf3b63Virustotal results 37/57 (64.91%) TorrentLocker 37.48.106.49:443
2016-10-23 11:48:0493fe50a496a208fd8976dc31e8bf3b63Virustotal results 37/57 (64.91%) TorrentLocker 37.48.106.49:443
2016-10-23 06:09:094d19b15e8cf6ac9ec9dc276f4dcaa0e0Virustotal results 22/56 (39.29%) TorrentLocker 37.48.106.49:443
2016-10-23 06:09:094d19b15e8cf6ac9ec9dc276f4dcaa0e0Virustotal results 22/56 (39.29%) TorrentLocker 37.48.106.49:443

# of entries: 6 (max: 100)