SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f6578ed18da0aa745926a909e681dcca56eecfb1.
Database Entry
| SHA1 Fingerprint: | f6578ed18da0aa745926a909e681dcca56eecfb1 |
|---|---|
| Certificate Common Name (CN): | www.baidu.cn |
| Issuer Distinguished Name (DN): | www.baidu.cn |
| TLS Version: | TLS 1.2' NOTBEF |
| First seen: | 2020-10-28 09:07:22 UTC |
| Last seen: | 2021-07-26 15:23:26 UTC |
| Status: | Blacklisted |
| Listing reason: | CobaltStrike C&C |
| Listing date: | 2021-07-27 07:43:51 |
| Malware samples: | 6 |
| Botnet C&Cs: | 4 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-07-26 15:23:26 | fd3f386397ab9f626b2888e40a7998c9 |  8 / 69 (11.59%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-07-26 15:23:26 | fd3f386397ab9f626b2888e40a7998c9 | 8 / 69 (11.59%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-06-20 07:42:18 | d89c813bf46d01f144a20592d371f0cc | 42 / 69 (60.87%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-06-20 07:42:18 | d89c813bf46d01f144a20592d371f0cc | 42 / 69 (60.87%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-06-12 14:58:34 | e1b0b2e3085b609825ae1a70fa336a54 | 34 / 70 (48.57%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-06-12 14:58:34 | e1b0b2e3085b609825ae1a70fa336a54 | 34 / 70 (48.57%)
| CobaltStrike | 103.72.4.166:8443 |
| 2021-04-15 06:19:59 | ae48888965decabadc9a01ab6d075e81 | 39 / 70 (55.71%)
| CobaltStrike | 117.51.136.152:8443 |
| 2021-04-15 06:19:59 | ae48888965decabadc9a01ab6d075e81 | 39 / 70 (55.71%)
| CobaltStrike | 117.51.136.152:8443 |
| 2021-02-27 21:48:15 | 2961f9fcfb020c8cbbae4e6730e5624f | 20 / 69 (28.99%)
| CobaltStrike | 42.51.46.58:443 |
| 2021-02-27 21:48:15 | 2961f9fcfb020c8cbbae4e6730e5624f | 20 / 69 (28.99%)
| CobaltStrike | 42.51.46.58:443 |
| 2020-10-28 09:07:22 | f11d52fb13849c3336a2937dcf66dc24 | 24 / 70 (34.29%)
| CobaltStrike | 49.233.89.89:8443 |
| 2020-10-28 09:07:22 | f11d52fb13849c3336a2937dcf66dc24 | 24 / 70 (34.29%)
| CobaltStrike | 49.233.89.89:8443 |
# of entries: 12 (max: 100)