SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d4f3ef1bef3d140ad91e83c18aaf28ad3ac87980.

Database Entry


SHA1 Fingerprint:d4f3ef1bef3d140ad91e83c18aaf28ad3ac87980
Certificate Common Name (CN):cjkjlah.com
Issuer Distinguished Name (DN):cjkjlah.com
TLS Version:TLS 1.2
First seen:2016-12-24 02:29:17 UTC
Last seen:2016-12-29 13:54:18 UTC
Status:Blacklisted
Listing reason:Vawtrak C&C
Listing date:2016-12-24 12:27:58
Malware samples:3
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-12-29 13:54:180d1980e131902fab2b495de74fef30f8n/aVawtrak 91.221.37.6:443
2016-12-26 20:09:51a11546b192a216b0f7d36140b7ec6963Virustotal results 22/62 (35.48%) Vawtrak 91.221.37.6:443
2016-12-24 02:29:17ae167e489b85ee1f778a6c7d548fde53n/aVawtrak 93.189.43.164:443

# of entries: 3 (max: 100)