Cert Graveyard Report

Certificate Signer: OC Agro ApS
Certificate Serial: 33 00 01 97 A4 D1 21 A6 13 08 4F 72 57 00 00 00 01 97 A4

All Cert Graveyard entries are considered malware. Other files by the same certificate serial number should be considered suspect.

Malware Family:

Forever Botnet,BR-01

SHA256 Hash:

1768cd3d250cdf365e7242707fe8864eb054f9446789f9928324c3133773ca57

Certificate Serial:

33 00 01 97 A4 D1 21 A6 13 08 4F 72 57 00 00 00 01 97 A4

Certificate Signer:

OC Agro ApS

Certificate Issuer:

Microsoft ID Verified CS AOC CA 04

Valid From:

2026-06-01 11:14:00

Valid To:

2026-06-04 11:14:00

Reported:

2026-06-03 13:48:04 UTC

Notes:

Backdoors/RATs being used in phishing campaigns in Brazil.