SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint db16d18d72499c0f97ed983429e76d77067b0867.

Database Entry

SHA1 Fingerprint:db16d18d72499c0f97ed983429e76d77067b0867
Certificate Common Name (CN):tapewormorchestra.top
Issuer Distinguished Name (DN):R3
TLS Version:TLS 1.2
First seen:2021-04-11 17:41:17 UTC
Last seen:2021-04-12 08:33:26 UTC
Status:Blacklisted
Listing reason:RaccoonStealer C&C
Listing date:2021-04-12 08:01:56
Malware samples:15
Botnet C&Cs:4

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-04-12 08:33:2684f322b0a5f06bcbb553fbfdfdb480a3Virustotal results 44 / 70 (62.86%) RaccoonStealer195.123.215.115:443
2021-04-12 08:33:2684f322b0a5f06bcbb553fbfdfdb480a3Virustotal results 44 / 70 (62.86%) RaccoonStealer195.123.215.115:443
2021-04-12 08:17:46bf9b680dc5b3b65fd7f47a04dbc21843n/aRaccoonStealer195.123.215.115:443
2021-04-12 08:17:46bf9b680dc5b3b65fd7f47a04dbc21843n/aRaccoonStealer195.123.215.115:443
2021-04-12 08:14:33714db9482272ce0717bc3b913217339fn/aServHelper195.123.215.115:443
2021-04-12 08:14:33714db9482272ce0717bc3b913217339fn/aServHelper195.123.215.115:443
2021-04-12 07:58:34160b82a2cebc6431fd6b9ea9f5b3bc6en/aServHelper176.103.61.84:443
2021-04-12 07:58:34160b82a2cebc6431fd6b9ea9f5b3bc6en/aServHelper176.103.61.84:443
2021-04-12 07:52:13cf6ac3e84ff3a09d7106e5b7157da8d8n/aRaccoonStealer195.123.215.115:443
2021-04-12 07:52:13cf6ac3e84ff3a09d7106e5b7157da8d8n/aRaccoonStealer195.123.215.115:443
2021-04-12 07:36:31bcb963922cded32b86e95b1f17b284e7n/aRaccoonStealer176.103.61.84:443
2021-04-12 07:36:31bcb963922cded32b86e95b1f17b284e7n/aRaccoonStealer176.103.61.84:443
2021-04-12 07:30:126f3dbe0a78e953e41cf84618d95579c5Virustotal results 16 / 58 (27.59%) RaccoonStealer195.123.215.115:443
2021-04-12 07:30:126f3dbe0a78e953e41cf84618d95579c5Virustotal results 16 / 58 (27.59%) RaccoonStealer195.123.215.115:443
2021-04-12 05:16:047b8cec428653a5a825830748cd6426a7n/aServHelper195.54.33.131:443
2021-04-12 05:16:047b8cec428653a5a825830748cd6426a7n/aServHelper195.54.33.131:443
2021-04-12 04:27:532c11bb083df1e906729b5926fd10dad7Virustotal results 20 / 70 (28.57%) RaccoonStealer195.123.215.115:443
2021-04-12 04:27:532c11bb083df1e906729b5926fd10dad7Virustotal results 20 / 70 (28.57%) RaccoonStealer195.123.215.115:443
2021-04-12 03:43:491a7e5faad1e77cc67ffc51f5f7861f46Virustotal results 47 / 70 (67.14%) ArkeiStealer195.54.33.131:443
2021-04-12 03:43:491a7e5faad1e77cc67ffc51f5f7861f46Virustotal results 47 / 70 (67.14%) ArkeiStealer195.54.33.131:443
2021-04-12 03:38:49424ee8cc62253619a51d1e9c09afca34n/aRaccoonStealer195.54.33.131:443
2021-04-12 03:38:49424ee8cc62253619a51d1e9c09afca34n/aRaccoonStealer195.54.33.131:443
2021-04-12 02:28:54000e43fe0944da48d0e033d95a7cf1e0Virustotal results 45 / 70 (64.29%) RaccoonStealer195.54.33.131:443
2021-04-12 02:28:54000e43fe0944da48d0e033d95a7cf1e0Virustotal results 45 / 70 (64.29%) RaccoonStealer195.54.33.131:443
2021-04-11 18:41:14a75628e56efd192bb29b9a02b33cb984Virustotal results 41 / 70 (58.57%) 74.119.195.167:443
2021-04-11 18:41:14a75628e56efd192bb29b9a02b33cb984Virustotal results 41 / 70 (58.57%) 74.119.195.167:443
2021-04-11 18:23:51a7531550ede2500104df20f025ac3e47Virustotal results 40 / 70 (57.14%) 74.119.195.167:443
2021-04-11 18:23:51a7531550ede2500104df20f025ac3e47Virustotal results 40 / 70 (57.14%) 74.119.195.167:443
2021-04-11 17:41:18a346fcfb733f61d3d0eea46c8ae21e95Virustotal results 40 / 70 (57.14%) 74.119.195.167:443
2021-04-11 17:41:18a346fcfb733f61d3d0eea46c8ae21e95Virustotal results 40 / 70 (57.14%) 74.119.195.167:443

# of entries: 30 (max: 100)