SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint cadf6b3f7ceb64de2253e8c0734b867a2762987a.

Database Entry


SHA1 Fingerprint:cadf6b3f7ceb64de2253e8c0734b867a2762987a
Certificate Common Name (CN):zk89.net
Issuer Distinguished Name (DN):WE1
TLS Version:TLS 1.2
First seen:2026-09-20 19:49:08 UTC
Last seen:2026-09-22 20:35:32 UTC
Status:Blacklisted
Listing reason:Vidar C&C
Listing date:2026-09-24 05:23:07
Malware samples:20
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-09-22 20:35:3264b0a4e82327e747e8986cc4fa949741n/a104.21.34.174:443
2026-09-22 20:22:06e5acc553c26fd5836f8584fb71d8fb8fn/a104.21.34.174:443
2026-09-22 20:18:53c14ec47a1a40f06a284a48a716c39been/a104.21.34.174:443
2026-09-22 18:18:1576b3632475bc8077a4ebcea8a9c814b1n/a172.67.163.140:443
2026-09-22 11:05:5234b727da695d5bd1ba23f8434cd3652en/a104.21.34.174:443
2026-09-22 09:54:314945b99893137b86bc6228f58e9b9287n/a172.67.163.140:443
2026-09-22 09:27:563f1f04241fddce3bc32e4e81f5652e2an/a104.21.34.174:443
2026-09-22 09:14:29486b2400cc4891abf978179035e611c4n/a172.67.163.140:443
2026-09-22 07:42:072ad8dd86865c52dfdb05ec4aa2b3fafen/a104.21.34.174:443
2026-09-22 07:09:052a024d4ed0f88623fb1c9e4adce169aen/a172.67.163.140:443
2026-09-22 06:39:3830ae09f792c34b3d2de3dfc4520da0d8n/a104.21.34.174:443
2026-09-22 06:33:35375fcdacfbe01eaf7823033746e24dc3n/a104.21.34.174:443
2026-09-22 06:30:522f51e2d0967486f21904d461aeed9a88n/a172.67.163.140:443
2026-09-22 06:23:15377a425d00fefd91fe7342fa8adf0785n/a172.67.163.140:443
2026-09-21 14:58:350891d41e89120387bf399c8ba62cc666n/a172.67.163.140:443
2026-09-21 14:56:5601633032a609e1d33a6976ee464fc56en/a172.67.163.140:443
2026-09-21 13:38:45074539569501fe1e7193f6219f0e679cn/a104.21.34.174:443
2026-09-21 13:15:4713a00df57986fffbc96a8674d5357bf3n/a172.67.163.140:443
2026-09-21 02:13:3678a3def2ef757153d63ffa45de947d1fn/a104.21.34.174:443
2026-09-20 19:49:081919778e6bbb27188c910edb647de85dn/a104.21.34.174:443

# of entries: 20 (max: 100)