SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d101789ba068fc745adb51a320ef0163236aa9f7.

Database Entry


SHA1 Fingerprint:d101789ba068fc745adb51a320ef0163236aa9f7
Certificate Common Name (CN):itonde9swheca.meveressecodbi.sv
Issuer Distinguished Name (DN):itonde9swheca.meveressecodbi.sv
TLS Version:TLS 1.2' NOTBEF
First seen:2018-11-24 00:44:19 UTC
Last seen:2018-12-13 06:13:03 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2018-12-08 09:41:24
Malware samples:19
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-12-13 06:13:03a53eb2b38f0a36f001a58e5113143781Virustotal results 34/71 (47.89%) 172.106.33.46:443
2018-12-10 15:40:420c26b2cc52b429a8472574fa20b80dd1Virustotal results 46/70 (65.71%) 172.106.33.46:443
2018-12-07 10:33:29164ffe1ffeaa0a954104d79c754c3b45Virustotal results 9/67 (13.43%) Dridex 172.106.33.46:443
2018-12-07 00:31:521afe1fc621f13bf7905a8e1c2384bafeVirustotal results 41/71 (57.75%) Dridex 172.106.33.46:443
2018-12-03 18:05:21be4733da4ced8716cb092a60291242d5Virustotal results 39/70 (55.71%) Dridex 172.106.33.46:443
2018-11-27 16:12:171e4f0502e15f23deb677cd6de11d0ffan/aGozi 172.106.33.46:443
2018-11-27 16:10:3719cb12ab7944e0e0be5f26f8d57bec96n/aGozi 172.106.33.46:443
2018-11-27 16:09:566fda62c46c49b83bd11aeabbd3a32904n/aGozi 172.106.33.46:443
2018-11-27 16:09:51101734d340958f361f4d412db9a3fd92n/aGozi 172.106.33.46:443
2018-11-27 16:08:18619dfab9a1acdc33ef0c2a2fcd1f3603n/aGozi 172.106.33.46:443
2018-11-27 16:08:070fa497c1a3603a4b629c26afb1e89869n/aGozi 172.106.33.46:443
2018-11-27 16:07:4220fc2b55c855deaedd8308da65cc4f25n/a172.106.33.46:443
2018-11-27 16:07:04703f20744b6db51ab6a7023bd636c2fcn/aGozi 172.106.33.46:443
2018-11-27 16:06:22835d2cca7737f4a44876b9d3f2eccfe6n/aGozi 172.106.33.46:443
2018-11-27 16:05:385c55e4f2ad96338563fff25e20812677n/aGozi 172.106.33.46:443
2018-11-27 16:04:12fc90b83e1fa10fa23d544478a2042ac2n/aGozi 172.106.33.46:443
2018-11-27 16:03:21e6948b959b931b1103f53f309ba20d2dn/aGozi 172.106.33.46:443
2018-11-27 16:01:45cae2134fad4a82ad756c5cf720ec41f6n/aGozi 172.106.33.46:443
2018-11-24 00:44:190f707a19a9d0f8c1072b7449b206caa6Virustotal results 38/69 (55.07%) Dridex 172.106.33.46:443

# of entries: 19 (max: 100)