SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint e4afee41dbf6e5c5e4a29fed9cedd988c8d709f7.
Database Entry
| SHA1 Fingerprint: | e4afee41dbf6e5c5e4a29fed9cedd988c8d709f7 |
|---|---|
| Certificate Common Name (CN): | thesanger.ck |
| Issuer Distinguished Name (DN): | thesanger.ck |
| TLS Version: | TLSv1 |
| First seen: | 2015-11-07 17:44:58 UTC |
| Last seen: | 2015-11-12 15:20:18 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-11-07 20:43:05 |
| Malware samples: | 3 |
| Botnet C&Cs: | 3 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-11-12 15:20:18 | d7560cc0068f039f495bc87738a482da |  36/55 (65.45%)
| Dridex | 124.219.79.244:443 |
| 2015-11-12 15:20:18 | d7560cc0068f039f495bc87738a482da | 36/55 (65.45%)
| Dridex | 124.219.79.244:443 |
| 2015-11-12 10:15:56 | 37ceca4ac82d0ade9bac811217590ecd | 0/47 (0.00%)
| Dridex | 182.18.182.20:443 |
| 2015-11-12 10:15:56 | 37ceca4ac82d0ade9bac811217590ecd | 0/47 (0.00%)
| Dridex | 182.18.182.20:443 |
| 2015-11-07 17:44:58 | 44d378ff4b9e6f0d0e253382da5c5d91 | 3/55 (5.45%)
| Dridex | 62.129.240.74:443 |
| 2015-11-07 17:44:58 | 44d378ff4b9e6f0d0e253382da5c5d91 | 3/55 (5.45%)
| Dridex | 62.129.240.74:443 |
# of entries: 6 (max: 100)