SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint ebd99519da72873ae03f9210996f49af6b169fa0.
Database Entry
| SHA1 Fingerprint: | ebd99519da72873ae03f9210996f49af6b169fa0 |
|---|---|
| Certificate Common Name (CN): | example.com |
| Issuer Distinguished Name (DN): | example.com |
| TLS Version: | TLS 1.2 |
| First seen: | 2018-01-14 16:38:50 UTC |
| Last seen: | 2018-01-19 18:03:59 UTC |
| Status: | Blacklisted |
| Listing reason: | TrickBot C&C |
| Listing date: | 2018-01-19 14:47:59 |
| Malware samples: | 6 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2018-01-19 18:03:59 | a1e0fbacaa6311bbf37b93c8ac7d0556 |  11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-19 18:03:59 | a1e0fbacaa6311bbf37b93c8ac7d0556 | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-19 18:03:59 | a1e0fbacaa6311bbf37b93c8ac7d0556 | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-19 18:03:59 | a1e0fbacaa6311bbf37b93c8ac7d0556 | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 03:46:40 | 3209ffc8d8784e3a54a5ab5856473c50 | 10/68 (14.71%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 03:46:40 | 3209ffc8d8784e3a54a5ab5856473c50 | 10/68 (14.71%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 03:46:40 | 3209ffc8d8784e3a54a5ab5856473c50 | 10/68 (14.71%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 03:46:40 | 3209ffc8d8784e3a54a5ab5856473c50 | 10/68 (14.71%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 01:49:59 | 78c35246c7f586f977eb1b58916368a8 | 35/68 (51.47%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 01:49:59 | 78c35246c7f586f977eb1b58916368a8 | 35/68 (51.47%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 01:49:59 | 78c35246c7f586f977eb1b58916368a8 | 35/68 (51.47%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-15 01:49:59 | 78c35246c7f586f977eb1b58916368a8 | 35/68 (51.47%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:49:05 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:49:05 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:49:05 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:49:05 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:38:51 | 17f050c5af94acce5aadb20ff45c534c | 12/68 (17.65%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:38:51 | 17f050c5af94acce5aadb20ff45c534c | 12/68 (17.65%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:38:51 | 17f050c5af94acce5aadb20ff45c534c | 12/68 (17.65%)
| TrickBot | 37.230.114.93:443 |
| 2018-01-14 16:38:51 | 17f050c5af94acce5aadb20ff45c534c | 12/68 (17.65%)
| TrickBot | 37.230.114.93:443 |
# of entries: 24 (max: 100)