SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f96e9ed9ced56f39565f806f8ec00453d0f285c9.
Database Entry
| SHA1 Fingerprint: | f96e9ed9ced56f39565f806f8ec00453d0f285c9 |
|---|---|
| Certificate Common Name (CN): | eucdn2.asia |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-07-14 20:25:29 UTC |
| Last seen: | 2025-07-15 15:30:57 UTC |
| Status: | Blacklisted |
| Listing reason: | DeerStealer C&C |
| Listing date: | 2025-07-16 03:58:34 |
| Malware samples: | 9 |
| Botnet C&Cs: | 4 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-07-15 15:30:57 | 218c32eaecdb771d95252f1e9fbf9f4d | n/a | 104.21.96.1:443 | |
| 2025-07-15 14:23:13 | 3cabb19c925466670ee8c49c7c4a1a4f | n/a | 104.21.32.1:443 | |
| 2025-07-15 12:40:50 | 342e715b0874c9a45bc6fb927797b37e | n/a | 104.21.48.1:443 | |
| 2025-07-15 06:57:38 | abf0bbf30064fcc399cb0baec9509d35 | n/a | 104.21.48.1:443 | |
| 2025-07-15 06:08:22 | c541a4b8be62403435a0cbdfdbd107df | n/a | 104.21.32.1:443 | |
| 2025-07-15 04:51:21 | 99f414a43c8e2b5e0c3ebe0324e6d6b3 | n/a | 104.21.48.1:443 | |
| 2025-07-15 00:15:35 | 71dbe6cf7b3538bba060adfdbb461799 | n/a | 104.21.16.1:443 | |
| 2025-07-14 23:50:44 | ebfeda6b74b932d61858bd4f9f0e7414 | n/a | 104.21.48.1:443 | |
| 2025-07-14 20:25:29 | 20a6002c97ad132233058433edcd257f | n/a | 104.21.32.1:443 |
# of entries: 9 (max: 100)