SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint ddbea7ab02afe44d5bfc1dbef090f26c8b01e823.

Database Entry

SHA1 Fingerprint:ddbea7ab02afe44d5bfc1dbef090f26c8b01e823
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-07-20 15:49:06 UTC
Last seen:2016-07-22 19:59:25 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-07-21 07:22:10
Malware samples:4
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-07-22 19:59:25aae183cb57e43a5ad227c88534c2d70fn/aShylock 115.90.71.164:80
2016-07-22 19:59:25aae183cb57e43a5ad227c88534c2d70fn/aShylock 115.90.71.164:80
2016-07-21 00:58:2246310e3e0d93b3fe8ac456c715c1b026n/aShylock 115.90.71.164:80
2016-07-21 00:58:2246310e3e0d93b3fe8ac456c715c1b026n/aShylock 115.90.71.164:80
2016-07-20 18:08:244713fa84c6d93d34b42d07be394a713bn/aShylock 115.90.71.164:80
2016-07-20 18:08:244713fa84c6d93d34b42d07be394a713bn/aShylock 115.90.71.164:80
2016-07-20 15:49:06de08fd2889cb41c1b807f65c0fcfb7d1n/aGootkit 115.90.71.164:80
2016-07-20 15:49:06de08fd2889cb41c1b807f65c0fcfb7d1n/aGootkit 115.90.71.164:80

# of entries: 8 (max: 100)