SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f8e77b396c9e89d584ecee41817b40541e957af0.

Database Entry


SHA1 Fingerprint:f8e77b396c9e89d584ecee41817b40541e957af0
Certificate Common Name (CN):dthalqudreghi.gy
Issuer Distinguished Name (DN):dthalqudreghi.gy
TLS Version:TLS 1.2
First seen:2016-02-26 11:54:42 UTC
Last seen:2016-03-07 16:51:37 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-02-26 13:08:52
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-03-07 16:51:37941da8c84e1345f1128529a26d875f45Virustotal results 24/56 (42.86%) Dridex 91.236.4.234:4243
2016-02-28 00:39:257516f32e1dc4f45d32bb46fd31d456e3Virustotal results 21/56 (37.50%) Dridex 91.236.4.234:4243
2016-02-26 11:54:42537b069b16ad1441dd538c38d369c6caVirustotal results 29/55 (52.73%) Dridex 91.236.4.234:4243

# of entries: 3 (max: 100)