SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint db7000ad8c148580941840ce41d8efb95f478854.
Database Entry
| SHA1 Fingerprint: | db7000ad8c148580941840ce41d8efb95f478854 |
|---|---|
| Certificate Common Name (CN): | fernstead.cc |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-09-01 18:33:47 UTC |
| Last seen: | 2026-09-10 18:06:57 UTC |
| Status: | Blacklisted |
| Listing reason: | ACRStealer C&C |
| Listing date: | 2026-09-12 15:04:33 |
| Malware samples: | 4 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-09-10 18:06:57 | 08650b2c60e34a3d53cf743935049ecb | n/a | 104.21.8.121:443 | |
| 2026-09-05 20:05:22 | 74c0f5b2501ecf2005eb7f531dc13e8d | n/a | 172.67.139.111:443 | |
| 2026-09-05 20:03:56 | 7f59f876650eb2ed0ba265b1bb0df1ab | n/a | 104.21.8.121:443 | |
| 2026-09-01 18:33:47 | 656f81e9c7baeb3f367c0dc91c4e9822 | n/a | 172.67.139.111:443 |
# of entries: 4 (max: 100)