SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint ec18e0406f3eafa3eed3caff61f59e2e5ce26fff.
Database Entry
SHA1 Fingerprint: | ec18e0406f3eafa3eed3caff61f59e2e5ce26fff |
---|---|
Certificate Common Name (CN): | example.com |
Issuer Distinguished Name (DN): | example.com |
TLS Version: | TLS 1.2 |
First seen: | 2018-01-14 13:20:53 UTC |
Last seen: | 2018-01-21 05:22:00 UTC |
Status: | Blacklisted |
Listing reason: | TrickBot C&C |
Listing date: | 2018-01-19 14:40:59 |
Malware samples: | 8 |
Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
---|---|---|---|---|
2018-01-21 05:22:00 | a4318b261e7d4e1cfb541b5891c4fce1 | 39/66 (59.09%) | 78.24.218.206:443 | |
2018-01-21 05:22:00 | a4318b261e7d4e1cfb541b5891c4fce1 | 39/66 (59.09%) | 78.24.218.206:443 | |
2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:51:57 | 3d5eeaa64da02d7066e5f57c25368757 | 38/67 (56.72%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:07:52 | 92168328453a4fde7e21900d6c39cafc | 25/67 (37.31%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:07:52 | 92168328453a4fde7e21900d6c39cafc | 25/67 (37.31%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:07:52 | 92168328453a4fde7e21900d6c39cafc | 25/67 (37.31%) | TrickBot | 78.24.218.206:443 |
2018-01-17 06:07:52 | 92168328453a4fde7e21900d6c39cafc | 25/67 (37.31%) | TrickBot | 78.24.218.206:443 |
2018-01-15 06:35:53 | 223ab3e5bae65edf8fd5564b0b3befec | 33/68 (48.53%) | TrickBot | 78.24.218.206:443 |
2018-01-15 06:35:53 | 223ab3e5bae65edf8fd5564b0b3befec | 33/68 (48.53%) | TrickBot | 78.24.218.206:443 |
2018-01-15 06:35:53 | 223ab3e5bae65edf8fd5564b0b3befec | 33/68 (48.53%) | TrickBot | 78.24.218.206:443 |
2018-01-15 06:35:53 | 223ab3e5bae65edf8fd5564b0b3befec | 33/68 (48.53%) | TrickBot | 78.24.218.206:443 |
2018-01-15 01:05:19 | 546789c1cd49bac4013f07f39f9a6f7d | 27/66 (40.91%) | TrickBot | 78.24.218.206:443 |
2018-01-15 01:05:19 | 546789c1cd49bac4013f07f39f9a6f7d | 27/66 (40.91%) | TrickBot | 78.24.218.206:443 |
2018-01-15 01:05:19 | 546789c1cd49bac4013f07f39f9a6f7d | 27/66 (40.91%) | TrickBot | 78.24.218.206:443 |
2018-01-15 01:05:19 | 546789c1cd49bac4013f07f39f9a6f7d | 27/66 (40.91%) | TrickBot | 78.24.218.206:443 |
2018-01-14 16:49:06 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%) | TrickBot | 78.24.218.206:443 |
2018-01-14 16:49:06 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%) | TrickBot | 78.24.218.206:443 |
2018-01-14 16:49:06 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%) | TrickBot | 78.24.218.206:443 |
2018-01-14 16:49:06 | 4b2df84dc2dd08256bc1192cddbd3bac | 11/68 (16.18%) | TrickBot | 78.24.218.206:443 |
2018-01-14 15:08:41 | aa74d8418903bb73261b6d36bf4215e5 | 14/66 (21.21%) | TrickBot | 78.24.218.206:443 |
2018-01-14 15:08:41 | aa74d8418903bb73261b6d36bf4215e5 | 14/66 (21.21%) | TrickBot | 78.24.218.206:443 |
2018-01-14 15:08:41 | aa74d8418903bb73261b6d36bf4215e5 | 14/66 (21.21%) | TrickBot | 78.24.218.206:443 |
2018-01-14 15:08:41 | aa74d8418903bb73261b6d36bf4215e5 | 14/66 (21.21%) | TrickBot | 78.24.218.206:443 |
2018-01-14 13:20:53 | 4cd943175d68b31536451617434b0588 | 14/68 (20.59%) | TrickBot | 78.24.218.206:443 |
2018-01-14 13:20:53 | 4cd943175d68b31536451617434b0588 | 14/68 (20.59%) | TrickBot | 78.24.218.206:443 |
2018-01-14 13:20:53 | 4cd943175d68b31536451617434b0588 | 14/68 (20.59%) | TrickBot | 78.24.218.206:443 |
2018-01-14 13:20:53 | 4cd943175d68b31536451617434b0588 | 14/68 (20.59%) | TrickBot | 78.24.218.206:443 |
# of entries: 30 (max: 100)