SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f53a5c0e2c9f9f1708b1cf27afcd72cc167e842d.

Database Entry


SHA1 Fingerprint:f53a5c0e2c9f9f1708b1cf27afcd72cc167e842d
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2015-12-21 09:28:17 UTC
Last seen:2015-12-21 18:39:03 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2015-12-22 06:04:16
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-12-21 18:39:038a6db953713202cb9620eaba7275af01Virustotal results 3/54 (5.56%) Gootkit 199.68.198.117:80
2015-12-21 18:39:038a6db953713202cb9620eaba7275af01Virustotal results 3/54 (5.56%) Gootkit 199.68.198.117:80
2015-12-21 09:28:17c33c256b9f07b2adcf607e90bd417fc6Virustotal results 14/52 (26.92%) Gootkit 199.68.198.117:80
2015-12-21 09:28:17c33c256b9f07b2adcf607e90bd417fc6Virustotal results 14/52 (26.92%) Gootkit 199.68.198.117:80

# of entries: 4 (max: 100)