SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d496422a7934df513c1683844c8a6869e6462f6f.

Database Entry


SHA1 Fingerprint:d496422a7934df513c1683844c8a6869e6462f6f
Certificate Common Name (CN):www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US
Issuer Distinguished Name (DN):www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US
TLS Version:TLS 1.2
First seen:2016-12-22 16:53:49 UTC
Last seen:2016-12-23 03:23:59 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-12-23 07:38:55
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-12-23 03:23:59a4d6a6cbf453ba3bc204fb905675ee95n/aGootkit 185.101.94.187:80
2016-12-23 00:37:047d2052634b72dfb5d3d70864a91b05b6Virustotal results 30/56 (53.57%) Gootkit 185.101.94.187:80
2016-12-22 21:08:38ce74c3e57faf54fae85c868264a587d2n/aGootkit 185.101.94.187:80
2016-12-22 16:53:491d16931f60866f07aa17d085018eb36fn/aGootkit 185.101.94.187:80

# of entries: 4 (max: 100)