SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint decbb81279035610de2cde1c736492226ab2dc21.
Database Entry
| SHA1 Fingerprint: | decbb81279035610de2cde1c736492226ab2dc21 |
|---|---|
| Certificate Common Name (CN): | qbufw imsn |
| Issuer Distinguished Name (DN): | qbufw imsn |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-08-21 01:27:02 UTC |
| Last seen: | 2025-08-21 02:54:39 UTC |
| Status: | Blacklisted |
| Listing reason: | QuasarRAT C&C |
| Listing date: | 2025-08-21 05:57:50 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-08-21 02:54:39 | 784d0901cc00297c33d632ad6593c664 | n/a | 5.182.206.88:9992 | |
| 2025-08-21 01:53:16 | ec0acbc114cafd51cf50e1877f96c49a | n/a | 5.182.206.88:9992 | |
| 2025-08-21 01:37:12 | b2b205775ac8b281ea86d5f7510dfabb | n/a | 5.182.206.88:9992 | |
| 2025-08-21 01:27:02 | 68fc9428a804f359b0e0ee7e774524e8 | n/a | 5.182.206.88:9992 |
# of entries: 4 (max: 100)