SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d8b12e83595f43996c831d7c000bf4cb9ba9e51a.

Database Entry

SHA1 Fingerprint:d8b12e83595f43996c831d7c000bf4cb9ba9e51a
Certificate Common Name (CN):edcr.thalebel.la
Issuer Distinguished Name (DN):edcr.thalebel.la
TLS Version:TLSv1
First seen:2016-04-29 20:10:27 UTC
Last seen:2016-05-04 00:57:39 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-04-30 07:22:48
Malware samples:3
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-05-04 00:57:39337e2c2e4ef0ad03bd574f96e8a37f2dVirustotal results 35/57 (61.40%) Dridex 103.245.153.154:4033
2016-05-04 00:57:39337e2c2e4ef0ad03bd574f96e8a37f2dVirustotal results 35/57 (61.40%) Dridex 103.245.153.154:4033
2016-05-01 05:54:301ec6225fd57adb797f9eac50c16fd118Virustotal results 20/56 (35.71%) Dridex 103.245.153.154:4033
2016-05-01 05:54:301ec6225fd57adb797f9eac50c16fd118Virustotal results 20/56 (35.71%) Dridex 103.245.153.154:4033
2016-04-29 20:10:278dce66933cd5abb1821889ba4746a1b7Virustotal results 40/57 (70.18%) Dridex 103.245.153.154:4033
2016-04-29 20:10:278dce66933cd5abb1821889ba4746a1b7Virustotal results 40/57 (70.18%) Dridex 103.245.153.154:4033

# of entries: 6 (max: 100)