Collection of Upatre Samples ( alpha version)

Config File for 387339b51fa0177dfad8244680c68ea7

md5
387339b51fa0177dfad8244680c68ea7
source
virusshare
link
download.4n6?sample=1cee5d8cf6c8aab16463329f15e0289534ad45b8148e689bfb8356db6ed97e52
malware_name
qyqbj.exe
temp_file
scandate
0000-00-00 00:00:00
parsed
2015-07-08 20:27:08
decrypt_keys
5b86387c
check_keys
c2_server
94.23.247.202
baseport
9587
useragent
Opera
payload_format
sim
old
0
clientip
nr_targets
6
nr_delivery_sites
6
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
0608us1, 0608usH, 0608usP
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://battlezonepest.com/images/icons/us1.tar
2
https://weightlosstips.net84.net/images/us1.tar
3
https://autocaresvistabus.com/images/h3s.tar
4
https://blueiceginger.co.za/images/slide/h3s.tar
5
https://signaturelawgroup.com/images/b40s.tar
6
https://aryaerp.com/images/b40s.tar