SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint cf6e3a44ecf9d531e69e4a7955d6d2847585c001.
Database Entry
| SHA1 Fingerprint: | cf6e3a44ecf9d531e69e4a7955d6d2847585c001 |
|---|---|
| Certificate Common Name (CN): | DcRat |
| Issuer Distinguished Name (DN): | DcRat Server, OU=qwqdanchun, O=DcRat By qwqdanchun, L=SH, C=CN |
| TLS Version: | TLSv1 |
| First seen: | 2023-05-26 18:08:42 UTC |
| Last seen: | 2023-05-26 18:15:39 UTC |
| Status: | Blacklisted |
| Listing reason: | DCRat C&C |
| Listing date: | 2023-05-26 18:12:34 |
| Malware samples: | 3 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2023-05-26 18:15:39 | b9b2e2c08b68a6fe12f086e824779daa |  53 / 71 (74.65%)
| 64.235.61.43:8848 | |
| 2023-05-26 18:12:28 | a3d9894472bd78a131865fa6e9c4159e | 51 / 70 (72.86%)
| 64.235.61.43:8848 | |
| 2023-05-26 18:08:43 | 9548e1e90a3bf4c1d7c9fb1c47618eb0 | 53 / 71 (74.65%)
| DCRat | 64.235.61.43:8848 |
# of entries: 3 (max: 100)