SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f8b3a1dfd86a936e14295defee8c8e960a764d26.
Database Entry
| SHA1 Fingerprint: | f8b3a1dfd86a936e14295defee8c8e960a764d26 |
|---|---|
| Certificate Common Name (CN): | westcnds.asia |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-07-10 17:32:39 UTC |
| Last seen: | 2025-07-19 09:20:53 UTC |
| Status: | Blacklisted |
| Listing reason: | DeerStealer C&C |
| Listing date: | 2025-07-12 05:54:44 |
| Malware samples: | 32 |
| Botnet C&Cs: | 7 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-07-19 09:20:53 | 9987bf1a22f0383874f21979e35e6ba3 | n/a | 104.21.112.1:443 | |
| 2025-07-14 18:33:45 | 7d4fdece9669db8d539b819e1182dd43 | n/a | 104.21.112.1:443 | |
| 2025-07-14 15:59:01 | b0231ce7384d0903e64f8d1b2a623269 | n/a | 104.21.96.1:443 | |
| 2025-07-14 14:38:36 | 2bb811fc23f0556e3b852ab9fb84cbc2 | n/a | 104.21.32.1:443 | |
| 2025-07-14 06:12:50 | 319478d839aefde02ac90252e2bf110e | n/a | 104.21.48.1:443 | |
| 2025-07-13 23:27:54 | 5f04331fc82715081c44c8cd036a352b | n/a | 104.21.48.1:443 | |
| 2025-07-13 22:35:34 | ac07edea55cfcdf18b43bece05c92026 | n/a | 104.21.16.1:443 | |
| 2025-07-13 20:35:31 | 44df92b5c2f57777b6008cc04b0b18ff | n/a | 104.21.64.1:443 | |
| 2025-07-13 19:50:15 | 2035b967f1570889c328b41b1d9b39d9 | n/a | 104.21.112.1:443 | |
| 2025-07-13 18:05:42 | 4f95f189e7dd9d675821fd9e66f8bd5c | n/a | 104.21.112.1:443 | |
| 2025-07-13 15:10:45 | 18c31da5fadbc36b41f16c75f1c6032c | n/a | 104.21.48.1:443 | |
| 2025-07-13 11:36:19 | c4a48a972f82e32ba5745d6608828c4e | n/a | 104.21.32.1:443 | |
| 2025-07-13 09:18:43 | e589f3272e8c4d3f077794d3fa9e0f05 | n/a | 104.21.16.1:443 | |
| 2025-07-13 05:47:09 | ffc2ae5b1d1f3daeaee81223a24b6c48 | n/a | 104.21.80.1:443 | |
| 2025-07-13 03:32:54 | 0ad29f9859f694da300e5885481c3dc4 | n/a | 104.21.112.1:443 | |
| 2025-07-13 01:31:16 | 62bdc7b37d59365cffc64f789c2bf5de | n/a | 104.21.64.1:443 | |
| 2025-07-13 00:48:38 | d1b5064f639b85867981b3a53568ea13 | n/a | 104.21.96.1:443 | |
| 2025-07-12 20:27:48 | 41ee59e70f3b58d5b737000890a1c819 | n/a | 104.21.64.1:443 | |
| 2025-07-12 15:45:31 | efbe77867675f3c13b448170860b6ced | n/a | 104.21.48.1:443 | |
| 2025-07-12 12:56:54 | dbab91e2133e470db212553e1faaa530 | n/a | 104.21.96.1:443 | |
| 2025-07-12 12:17:02 | 51890b85acda563f5fc5c95ade3c49a2 | n/a | 104.21.48.1:443 | |
| 2025-07-12 10:10:31 | c7de486ef7fbb05e55ee13a8dd7541a2 | n/a | 104.21.32.1:443 | |
| 2025-07-12 09:50:54 | c4f36905021ca95d0053a06778e6643d | n/a | 104.21.16.1:443 | |
| 2025-07-12 05:19:09 | e9233ed365fc09bb546227db6c94ed0f | n/a | 104.21.112.1:443 | |
| 2025-07-12 02:51:47 | 679b62c45bb8ac1d0a8263757f47e102 | n/a | 104.21.32.1:443 | |
| 2025-07-11 15:52:38 | 0a668b7c83cc0850363f3f5b9b0a42a0 | n/a | 104.21.48.1:443 | |
| 2025-07-11 14:31:23 | 3360dbe920ac10e9e1635a5f2e659249 | n/a | 104.21.80.1:443 | |
| 2025-07-11 13:31:03 | ec5ac8560af117069db29b611a85a9f1 | n/a | 104.21.112.1:443 | |
| 2025-07-10 23:25:16 | 19b31eac03f29adf4b4c58026d87aa54 | n/a | 104.21.32.1:443 | |
| 2025-07-10 19:54:35 | 738b938b6ee2c776772dcdc58f8056a8 | n/a | 104.21.80.1:443 | |
| 2025-07-10 17:39:21 | 8fde286ee26e0300bda77f70fef1d4ea | n/a | 104.21.80.1:443 | |
| 2025-07-10 17:32:39 | f0bb54e2026219fb325d5aa4165d5e98 | n/a | 104.21.80.1:443 |
# of entries: 32 (max: 100)