SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f5cf905b05cde4a48c0f525f123c8bfbf08cc366.
Database Entry
| SHA1 Fingerprint: | f5cf905b05cde4a48c0f525f123c8bfbf08cc366 |
|---|---|
| Certificate Common Name (CN): | the-ebooks-store.com/emailAddress=contact@infws.com |
| Issuer Distinguished Name (DN): | International Security Depart Ca |
| TLS Version: | TLSv1 |
| First seen: | 2015-10-27 17:05:49 UTC |
| Last seen: | 2015-12-08 19:24:00 UTC |
| Status: | Blacklisted |
| Listing reason: | Malware C&C |
| Listing date: | 2015-11-26 11:56:41 |
| Malware samples: | 10 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-12-08 19:24:00 | 83b42d92cc833715f8a44c112c31653a |  29/55 (52.73%)
| Shifu | 69.64.59.144:443 |
| 2015-12-08 19:24:00 | 83b42d92cc833715f8a44c112c31653a | 29/55 (52.73%)
| Shifu | 69.64.59.144:443 |
| 2015-11-26 09:18:18 | f51068b41c7f028ea69cea4938b00a83 | 29/56 (51.79%)
| Shifu | 69.64.59.144:443 |
| 2015-11-26 09:18:18 | f51068b41c7f028ea69cea4938b00a83 | 29/56 (51.79%)
| Shifu | 69.64.59.144:443 |
| 2015-11-23 11:01:19 | 0f3dccb059fbccb2450f17bd7bee5e18 | 30/56 (53.57%)
| Downloader.Upatre | 69.64.59.144:443 |
| 2015-11-23 11:01:19 | 0f3dccb059fbccb2450f17bd7bee5e18 | 30/56 (53.57%)
| Downloader.Upatre | 69.64.59.144:443 |
| 2015-11-10 03:05:11 | 1fdc2eb86f026331015bcf7f30a98d88 | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-10 03:05:11 | 1fdc2eb86f026331015bcf7f30a98d88 | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-09 06:43:10 | fb384b4d6d5489476ccfe3c20907d7df | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-09 06:43:10 | fb384b4d6d5489476ccfe3c20907d7df | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-08 14:03:39 | dabfeb4ac18b20d60f1bd4dc2605f4fe | 26/56 (46.43%)
| Shifu | 69.64.59.144:443 |
| 2015-11-08 14:03:39 | dabfeb4ac18b20d60f1bd4dc2605f4fe | 26/56 (46.43%)
| Shifu | 69.64.59.144:443 |
| 2015-11-08 04:53:38 | 2a1195fa038d6825d81e781b1c063e41 | 20/56 (35.71%)
| Shifu | 69.64.59.144:443 |
| 2015-11-08 04:53:38 | 2a1195fa038d6825d81e781b1c063e41 | 20/56 (35.71%)
| Shifu | 69.64.59.144:443 |
| 2015-11-07 18:46:27 | 618754d052bd78d82f7b034d450bb23b | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-07 18:46:27 | 618754d052bd78d82f7b034d450bb23b | 23/56 (41.07%)
| Shifu | 69.64.59.144:443 |
| 2015-11-05 12:42:20 | 74a1fb52fafb7849138be984765a657d | 25/56 (44.64%)
| Shifu | 69.64.59.144:443 |
| 2015-11-05 12:42:20 | 74a1fb52fafb7849138be984765a657d | 25/56 (44.64%)
| Shifu | 69.64.59.144:443 |
| 2015-10-27 17:05:49 | 7d7ef24f40186cdc4014cba44581eff7 | 19/55 (34.55%)
| Shifu | 69.64.59.144:443 |
| 2015-10-27 17:05:49 | 7d7ef24f40186cdc4014cba44581eff7 | 19/55 (34.55%)
| Shifu | 69.64.59.144:443 |
# of entries: 20 (max: 100)