SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint cb660b8e58fa3e8b85f7a475f37fb37a3e072e4f.

Database Entry


SHA1 Fingerprint:cb660b8e58fa3e8b85f7a475f37fb37a3e072e4f
Certificate Common Name (CN):C=XX, L=Default City, O=Default Company Ltd
Issuer Distinguished Name (DN):C=XX, L=Default City, O=Default Company Ltd
TLS Version:TLS 1.1
First seen:2018-09-12 04:32:53 UTC
Last seen:2018-09-12 04:51:00 UTC
Status:Blacklisted
Listing reason:PandaZeuS C&C
Listing date:2018-09-12 04:53:03
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-09-12 04:51:00a1ac08123d98990c905e2608ce25d5e6Virustotal results 24/67 (35.82%) Hancitor89.223.94.240:443
2018-09-12 04:51:00a1ac08123d98990c905e2608ce25d5e6Virustotal results 24/67 (35.82%) Hancitor89.223.94.240:443
2018-09-12 04:46:49512bfbbcc44b9dfe6be9e3d9601708d0Virustotal results 11/68 (16.18%) PandaZeuS 89.223.94.240:443
2018-09-12 04:46:49512bfbbcc44b9dfe6be9e3d9601708d0Virustotal results 11/68 (16.18%) PandaZeuS 89.223.94.240:443
2018-09-12 04:38:35cf8a34f3b11ae9a3361ca249f8a77504Virustotal results 5/67 (7.46%) PandaZeuS 89.223.94.240:443
2018-09-12 04:38:35cf8a34f3b11ae9a3361ca249f8a77504Virustotal results 5/67 (7.46%) PandaZeuS 89.223.94.240:443
2018-09-12 04:32:53cf507d9158eed1ae053218e37c05a80cVirustotal results 33/61 (54.10%) Downloader.Pony89.223.94.240:443
2018-09-12 04:32:53cf507d9158eed1ae053218e37c05a80cVirustotal results 33/61 (54.10%) Downloader.Pony89.223.94.240:443

# of entries: 8 (max: 100)