SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint ceb8616d116b0bcfeefc3a1b15dde6e004f8cc1a.
Database Entry
| SHA1 Fingerprint: | ceb8616d116b0bcfeefc3a1b15dde6e004f8cc1a |
|---|---|
| Certificate Common Name (CN): | romantik.it |
| Issuer Distinguished Name (DN): | romantik.it |
| TLS Version: | TLSv1 |
| First seen: | 2015-06-30 12:04:21 UTC |
| Last seen: | 2015-07-01 03:46:41 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-07-13 07:22:42 |
| Malware samples: | 2 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-07-01 03:46:41 | b16c64284354646cc5ae9071fb53fcee |  0/55 (0.00%)
| Dridex | 46.19.136.211:443 |
| 2015-07-01 03:46:41 | b16c64284354646cc5ae9071fb53fcee | 0/55 (0.00%)
| Dridex | 46.19.136.211:443 |
| 2015-06-30 12:04:21 | 0a977dfcb93301f1841dbe2272d3102b | 0/56 (0.00%)
| Dridex | 78.47.182.212:443 |
| 2015-06-30 12:04:21 | 0a977dfcb93301f1841dbe2272d3102b | 0/56 (0.00%)
| Dridex | 78.47.182.212:443 |
# of entries: 4 (max: 100)