SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f8286ed9ff59a8bec827d059599b434b31d4bda6.
Database Entry
| SHA1 Fingerprint: | f8286ed9ff59a8bec827d059599b434b31d4bda6 | 
|---|---|
| Certificate Common Name (CN): | narwhaltr.live | 
| Issuer Distinguished Name (DN): | WE1 | 
| TLS Version: | TLS 1.2 | 
| First seen: | 2025-04-30 01:43:59 UTC | 
| Last seen: | 2025-04-30 07:37:27 UTC | 
| Status: | Blacklisted | 
| Listing reason: | LummaStealer C&C | 
| Listing date: | 2025-04-30 07:40:54 | 
| Malware samples: | 2 | 
| Botnet C&Cs: | 2 | 
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) | 
|---|---|---|---|---|
| 2025-04-30 07:37:27 | 96e52bcd63313c5215dcfba57e880724 | n/a | 104.21.74.68:443 | |
| 2025-04-30 01:43:59 | 709678f09e778eeb25670a951e21bee5 | n/a | 172.67.200.43:443 | 
# of entries: 2 (max: 100)