SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint efb9eba14b8210a27a72d7da4550ad4445dc5024.

Database Entry


SHA1 Fingerprint:efb9eba14b8210a27a72d7da4550ad4445dc5024
Certificate Common Name (CN):sni.cloudflaressl.com
Issuer Distinguished Name (DN):CloudFlare Inc ECC CA-2
TLS Version:TLS 1.2
First seen:2019-01-13 11:08:37 UTC
Last seen:2019-02-10 05:23:02 UTC
Status:Blacklisted
Listing reason:Smoke Loader C&C
Listing date:2019-02-10 09:36:05
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-02-10 05:23:02d2ca84e6f6517b209eb95cc178c833b0Virustotal results 48/69 (69.57%) Smoke Loader 104.18.34.162:443
2019-01-19 18:54:3029bda6f176aac3ba87b18546115854e9Virustotal results 40/70 (57.14%) 104.18.34.162:443
2019-01-13 11:08:372635079e4b497509024bbe13b68077f1Virustotal results 39/72 (54.17%) 104.18.34.162:443

# of entries: 3 (max: 100)