Collection of Upatre Samples ( alpha version)

Config File for 199c4bc421d45c5467628acbd87030c0

md5
199c4bc421d45c5467628acbd87030c0
source
virusshare
link
download.4n6?sample=5baa4a34557d28ebbe5c8da7b46a944fd46960cbde1190cd28a1f306201039ec
malware_name
nioltei.exe
temp_file
scandate
2015-08-30 20:09:09
parsed
2015-09-16 23:32:27
decrypt_keys
31ab6e57
check_keys
c2_server
93.185.4.90
baseport
9587
useragent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
payload_format
sim
old
0
clientip
checkip.dyndns.org
nr_targets
51
nr_delivery_sites
50
nr_delivery_sites_online
22
nr_payloads
1
ksa
dec
pdir
TACH3
delivered payloads:
1
7252817560a2e70a861b738740e96c3d
downloaded
2015-09-14 15:15:17
scanned (on VT)
2015-08-20 10:16:16
positives
33 / 56
detected as
MicroWorld-eScan
Trojan.GenericKD.2599291
nProtect
Trojan.GenericKD.2599291
CAT-QuickHeal
Trojan.Dyname.r4
McAfee
RDN/Generic.grp
Malwarebytes
Spyware.Dyre
Zillya
Trojan.Kryptik.Win32.766352
BitDefender
Trojan.GenericKD.2599291
K7GW
Trojan ( 004c97a01 )
K7AntiVirus
Trojan ( 004c97a01 )
NANO-Antivirus
Trojan.Win32.DownLoader15.duoxur
Symantec
Trojan.Gen
ESET-NOD32
a variant of Win32/Kryptik.DRKS
Agnitum
Trojan.Kryptik!7liaSmN69Gg
Ad-Aware
Trojan.GenericKD.2599291
Comodo
UnclassifiedMalware
F-Secure
Trojan.GenericKD.2599291
DrWeb
Trojan.DownLoader15.14430
VIPRE
Trojan.Win32.Generic!BT
TrendMicro
TROJ_GEN.R03EC0DGV15
Emsisoft
Trojan.GenericKD.2599291 (B)
Avira
TR/Crypt.XPACK.Gen
Fortinet
W32/Kryptik.DRKS!tr
Arcabit
Trojan.Generic.D27A97B
Microsoft
Trojan:Win32/Dynamer!ac
ALYac
Trojan.GenericKD.2599291
AVware
Trojan.Win32.Generic!BT
Panda
Generic Suspicious
Tencent
Win32.Trojan.Inject.Auto
Ikarus
Trojan.Win32.Crypt
GData
Trojan.GenericKD.2599291
AVG
Crypt4.BPDB
Baidu-International
Adware.Win32.iBryte.DRKS
Qihoo-360
HEUR/QVM06.2.Malware.Gen
not detected by:
Bkav, CMC, TheHacker, F-Prot, TrendMicro-HouseCall, Avast, ClamAV, Kaspersky, Alibaba, ViRobot, AegisLab, ByteHero, Rising, Sophos, McAfee-GW-Edition, Cyren, Jiangmin, Kingsoft, SUPERAntiSpyware, AhnLab-V3, TotalDefense, VBA32, Zoner
delivery sites:
1
https://24.220.92.193/ic3.png
2
https://176.36.251.208/ic3.png
3
https://67.221.195.6/ic3.png
7252817560a2e70a861b738740e96c3d
4
https://69.163.81.211/ic3.png
5
https://216.254.231.11/ic3.png
7252817560a2e70a861b738740e96c3d
6
https://24.33.131.116/ic3.png
7252817560a2e70a861b738740e96c3d
7
https://104.174.123.66/ic3.png
8
https://72.230.82.80/ic3.png
7252817560a2e70a861b738740e96c3d
9
https://173.248.31.6/ic3.png
7252817560a2e70a861b738740e96c3d
10
https://69.9.204.114/ic3.png
7252817560a2e70a861b738740e96c3d
11
https://188.255.239.34/ic3.png
12
https://69.144.171.44/ic3.png
7252817560a2e70a861b738740e96c3d
13
https://65.33.236.173/ic3.png
7252817560a2e70a861b738740e96c3d
14
https://98.214.11.253/ic3.png
15
https://24.148.217.188/ic3.png
7252817560a2e70a861b738740e96c3d
16
https://173.216.247.74/ic3.png
7252817560a2e70a861b738740e96c3d
17
https://77.48.30.156/ic3.png
7252817560a2e70a861b738740e96c3d
18
https://37.57.144.177/ic3.png
7252817560a2e70a861b738740e96c3d
19
https://95.143.141.50/ic3.png
20
https://194.228.203.19/ic3.png
21
https://87.249.142.189/ic3.png
7252817560a2e70a861b738740e96c3d
22
https://85.135.104.170/ic3.png
7252817560a2e70a861b738740e96c3d
23
https://76.84.81.120/ic3.png
24
https://84.246.161.47/ic3.png
25
https://217.168.210.122/ic3.png
26
https://68.70.242.203/ic3.png
7252817560a2e70a861b738740e96c3d
27
https://64.111.36.52/ic3.png
28
https://178.222.250.35/ic3.png
29
https://94.154.107.172/ic3.png
30
https://194.106.166.22/ic3.png
31
https://188.255.243.105/ic3.png
32
https://188.255.236.184/ic3.png
33
https://98.181.17.39/ic3.png
34
https://67.207.229.215/ic3.png
7252817560a2e70a861b738740e96c3d
35
https://67.206.96.68/ic3.png
36
https://67.222.197.54/ic3.png
37
https://69.8.50.85/ic3.png
38
https://67.22.167.163/ic3.png
39
https://209.40.238.170/ic3.png
40
https://64.111.42.64/ic3.png
41
https://72.174.240.148/ic3.png
42
https://63.248.156.246/ic3.png
7252817560a2e70a861b738740e96c3d
43
https://72.175.10.116/ic3.png
7252817560a2e70a861b738740e96c3d
44
https://73.142.130.81/ic3.png
45
https://208.117.68.78/ic3.png
7252817560a2e70a861b738740e96c3d
46
https://162.153.189.143/ic3.png
47
https://72.171.9.146/ic3.png
48
https://67.222.201.61/ic3.png
7252817560a2e70a861b738740e96c3d
49
https://209.27.49.117/ic3.png
7252817560a2e70a861b738740e96c3d
50
https://67.222.201.222/ic3.png
7252817560a2e70a861b738740e96c3d