| _id |
624be93fbda06f81e5c8116e |
| reference |
['https://sslbl.abuse.ch/ssl-certificates/sha1/6ece5ece4192683d2d84e25b0ba7e04f9cb7eb7c/'] |
| md5 |
['d053d4cd461951966e47ea44d28b42f8'] |
| sha1 |
['6ece5ece4192683d2d84e25b0ba7e04f9cb7eb7c'] |
| sha256 |
[] |
| mail |
[] |
| ip |
[] |
| domain |
[] |
| url |
[] |
| user |
netresec |
| tweet |
The certificate is identified as "AKBuilder" by NetworkMiner because that's how it is listed in the abuse-ch database that NetworkMiner uses.
Cobalt Strike sample hash: d053d4cd461951966e47ea44d28b42f8
https://sslbl.abuse.ch/ssl-certificates/sha1/6ece5ece4192683d2d84e25b0ba7e04f9cb7eb7c/ |
| id |
1510947449497600007 |
| retweets |
0 |
| link |
https://twitter.com/netresec/status/1510947449497600007 |
| mentions |
[] |
| hashtags |
[] |
| date |
2022-04-04 11:48:38 |
| timestamp |
1649098118 |