SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f776077e937db280ce77eacd06121c7368da99d5.
Database Entry
| SHA1 Fingerprint: | f776077e937db280ce77eacd06121c7368da99d5 |
|---|---|
| Certificate Common Name (CN): | itiasarangeiao.al |
| Issuer Distinguished Name (DN): | itiasarangeiao.al |
| TLS Version: | TLSv1 |
| First seen: | 2015-10-01 11:24:04 UTC |
| Last seen: | 2015-10-08 07:51:30 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-10-01 11:25:18 |
| Malware samples: | 5 |
| Botnet C&Cs: | 3 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-10-08 07:51:30 | 1028e693ef761566b3cafc6c9c602a9e |  4/57 (7.02%)
| Dridex | 195.251.250.37:448 |
| 2015-10-08 07:51:30 | 1028e693ef761566b3cafc6c9c602a9e | 4/57 (7.02%)
| Dridex | 195.251.250.37:448 |
| 2015-10-07 07:18:45 | 94862498d85b9e3b25894ac77dccfc46 | 3/56 (5.36%)
| Dridex | 195.251.250.37:448 |
| 2015-10-07 07:18:45 | 94862498d85b9e3b25894ac77dccfc46 | 3/56 (5.36%)
| Dridex | 195.251.250.37:448 |
| 2015-10-06 12:51:09 | 8982410d05e1839148299ca96af9e4c8 | 2/56 (3.57%)
| Dridex | 195.251.250.37:448 |
| 2015-10-06 12:51:09 | 8982410d05e1839148299ca96af9e4c8 | 2/56 (3.57%)
| Dridex | 195.251.250.37:448 |
| 2015-10-05 09:38:12 | 87b01608b8170029816df5eed11cd9c5 | 4/56 (7.14%)
| Dridex | 37.128.132.96:443 |
| 2015-10-05 09:38:12 | 87b01608b8170029816df5eed11cd9c5 | 4/56 (7.14%)
| Dridex | 37.128.132.96:443 |
| 2015-10-01 11:24:04 | d7e0beb36eda1936eed62582c87dd14a | 2/57 (3.51%)
| Dridex | 136.243.237.218:443 |
| 2015-10-01 11:24:04 | d7e0beb36eda1936eed62582c87dd14a | 2/57 (3.51%)
| Dridex | 136.243.237.218:443 |
# of entries: 10 (max: 100)