SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f14f1a83eddcdf14668e6f09426fc272d71dc371.
Database Entry
| SHA1 Fingerprint: | f14f1a83eddcdf14668e6f09426fc272d71dc371 |
|---|---|
| Certificate Common Name (CN): | efqwnxqwbebyqnbyeybeiurybuyxrfw.site |
| Issuer Distinguished Name (DN): | Let's Encrypt Authority X3 |
| TLS Version: | TLSv1 |
| First seen: | 2018-12-07 02:13:26 UTC |
| Last seen: | 2018-12-07 15:18:11 UTC |
| Status: | Blacklisted |
| Listing reason: | Gozi C&C |
| Listing date: | 2018-12-08 09:34:36 |
| Malware samples: | 2 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2018-12-07 15:18:11 | 900d041775d0fad33f4fa56bd74d24f8 |  11/68 (16.18%)
| Gozi | 144.202.23.191:443 |
| 2018-12-07 15:18:11 | 900d041775d0fad33f4fa56bd74d24f8 | 11/68 (16.18%)
| Gozi | 144.202.23.191:443 |
| 2018-12-07 02:13:26 | 343a5a1c746559206868cb9bf9aa2ac5 | 19/69 (27.54%)
| Gozi | 144.202.23.191:443 |
| 2018-12-07 02:13:26 | 343a5a1c746559206868cb9bf9aa2ac5 | 19/69 (27.54%)
| Gozi | 144.202.23.191:443 |
# of entries: 4 (max: 100)