SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint fba223148f25793aea78693781f3a9bb15a1f1e1.
Database Entry
| SHA1 Fingerprint: | fba223148f25793aea78693781f3a9bb15a1f1e1 |
|---|---|
| Certificate Common Name (CN): | DcRat |
| Issuer Distinguished Name (DN): | DcRat Server, OU=qwqdanchun, O=DcRat By qwqdanchun, L=SH, C=CN |
| TLS Version: | TLSv1 |
| First seen: | 2024-01-06 00:08:08 UTC |
| Last seen: | 2024-01-06 05:12:48 UTC |
| Status: | Blacklisted |
| Listing reason: | DCRat C&C |
| Listing date: | 2024-01-06 07:33:57 |
| Malware samples: | 3 |
| Botnet C&Cs: | 3 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2024-01-06 05:12:48 | 9d077548d780dd1be22f2cb902982602 |  39 / 64 (60.94%)
| AsyncRAT | 3.121.139.82:10680 |
| 2024-01-06 00:21:27 | 5f7febd687c82ba248246724e033f853 | 39 / 63 (61.90%)
| DCRat | 3.127.253.86:10680 |
| 2024-01-06 00:08:08 | 595777e0194e1d6b9b3498e6bf272777 | 45 / 72 (62.50%)
| DCRat | 52.28.112.211:10680 |
# of entries: 3 (max: 100)