SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint db2cdf3171d92d90f11fecd21163599f3c5fb7c4.

Database Entry


SHA1 Fingerprint:db2cdf3171d92d90f11fecd21163599f3c5fb7c4
Certificate Common Name (CN):ns2.sicher.in/emailAddress=ssl@ns2.sicher.in
Issuer Distinguished Name (DN):ns2.sicher.in/emailAddress=ssl@ns2.sicher.in
TLS Version:TLSv1
First seen:2015-04-04 20:17:22 UTC
Last seen:2015-07-07 13:33:52 UTC
Status:Blacklisted
Listing reason:Upatre C&C
Listing date:2015-04-05 07:15:16
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-07 13:33:5290ccfa84ca5431a69edfb52c96e1bd5cVirustotal results 40/47 (85.11%) 65.181.126.188:443
2015-07-07 13:33:5290ccfa84ca5431a69edfb52c96e1bd5cVirustotal results 40/47 (85.11%) 65.181.126.188:443
2015-04-04 20:17:22b8ea97eaae85057354e86f8a8c58bc20Virustotal results 47/55 (85.45%) 65.181.126.188:443
2015-04-04 20:17:22b8ea97eaae85057354e86f8a8c58bc20Virustotal results 47/55 (85.45%) 65.181.126.188:443

# of entries: 4 (max: 100)