SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint e1ec6a322ecc44b1f722bb32ec4f8eae690973ab.
Database Entry
| SHA1 Fingerprint: | e1ec6a322ecc44b1f722bb32ec4f8eae690973ab |
|---|---|
| Certificate Common Name (CN): | toothpastename.xyz |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-08-17 12:34:47 UTC |
| Last seen: | 2025-08-25 10:33:13 UTC |
| Status: | Blacklisted |
| Listing reason: | Gh0stRAT C&C |
| Listing date: | 2025-08-17 12:53:50 |
| Malware samples: | 19 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-08-25 10:33:13 | b15362f8ceeb613df48c1d1cb9e4941e | n/a | 104.21.30.78:443 | |
| 2025-08-22 09:59:59 | d025240c018bf573bb9a47499b2232eb | n/a | 104.21.30.78:443 | |
| 2025-08-20 14:19:55 | fcc44975951535f22c61951186b9bc50 | n/a | 104.21.30.78:443 | |
| 2025-08-20 10:24:37 | f0ac319e26d1e7ee268a809f88efeee1 | n/a | 172.67.172.127:443 | |
| 2025-08-20 09:06:02 | e8b1a8b309af08585389fb0a480a4726 | n/a | 104.21.30.78:443 | |
| 2025-08-18 15:13:36 | e27b08a85f8c4060e8aa26869b79260d | n/a | 172.67.172.127:443 | |
| 2025-08-18 11:02:48 | b730d524a76d11d3bab2db658c6dea46 | n/a | 172.67.172.127:443 | |
| 2025-08-18 10:11:49 | aeb2f3f04f4028c9181f429f20f2dade | n/a | 172.67.172.127:443 | |
| 2025-08-18 09:13:52 | a432f10a2be4228f77ff1f30ff3cfeb2 | n/a | 104.21.30.78:443 | |
| 2025-08-18 07:56:15 | 979a209333ad26de91df8097b375c941 | n/a | 104.21.30.78:443 | |
| 2025-08-18 04:43:15 | 7a016374d2376cf302dbedac240e1a2e | n/a | 172.67.172.127:443 | |
| 2025-08-18 02:46:41 | 63e67d84f5f4fad4e650839745c456e8 | n/a | 104.21.30.78:443 | |
| 2025-08-18 00:05:25 | 3d0dc126620da7a3c98db1e696d138c4 | n/a | 172.67.172.127:443 | |
| 2025-08-17 22:35:40 | 4aaa807b288f67768c201a0b0a23435d | n/a | 104.21.30.78:443 | |
| 2025-08-17 22:29:43 | 1abe6536a327d6a0ba4b0c6b68cab029 | n/a | 172.67.172.127:443 | |
| 2025-08-17 21:52:26 | 2b0446bb20d03e8bbacf98cec1fd6f52 | n/a | 104.21.30.78:443 | |
| 2025-08-17 20:22:07 | 43316f8adc1d498d5334d2e12aa110ed | n/a | 104.21.30.78:443 | |
| 2025-08-17 18:02:58 | 28a022e34cb6ef5962adfce54ae64d46 | n/a | 104.21.30.78:443 | |
| 2025-08-17 12:34:47 | da3491f09f4c94b15153876a2e760858 | n/a | 172.67.172.127:443 |
# of entries: 19 (max: 100)