SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint cb7857c2fed43e6a8bb248c07fa03d9191ce4467.

Database Entry


SHA1 Fingerprint:cb7857c2fed43e6a8bb248c07fa03d9191ce4467
Certificate Common Name (CN):pMYgPP
Issuer Distinguished Name (DN):pMYgPP
TLS Version:TLSv1
First seen:2023-03-18 06:46:44 UTC
Last seen:2023-03-19 08:22:15 UTC
Status:Blacklisted
Listing reason:AsyncRAT C&C
Listing date:2023-03-19 15:51:57
Malware samples:6
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2023-03-19 08:22:15e0a09819de2776684bef291583ac2289Virustotal results 36 / 68 (52.94%) RecordBreaker149.202.88.107:8080
2023-03-19 07:47:5794818c308ef7f6249fdffb82b9f9a303Virustotal results 27 / 69 (39.13%) RecordBreaker149.202.88.107:8080
2023-03-19 06:59:46125056d447d7b4da80d7f5caa649a54fVirustotal results 36 / 69 (52.17%) RecordBreaker149.202.88.107:8080
2023-03-18 09:32:051f657a76f984eb73f3fd30bf6e6f1145n/aSmoke Loader 149.202.88.107:8080
2023-03-18 08:04:0007b3856c2f6ffe6560d3982b0319648cn/a149.202.88.107:8080
2023-03-18 06:46:44befb211a603f7d67aceecae76293096fVirustotal results 30 / 69 (43.48%) RecordBreaker149.202.88.107:8080

# of entries: 6 (max: 100)