Collection of Upatre Samples ( alpha version)

Config File for 425369c6e7ed4b5987d4d9af00fedd7e

md5
425369c6e7ed4b5987d4d9af00fedd7e
source
virusshare
link
download.4n6?sample=db61f373de130ac80e65654a809ca37f52f4ad5837cb39ad38fb14d5cb8676f0
malware_name
tutlicos.exe
temp_file
tempC264.txt
scandate
0000-00-00 00:00:00
parsed
2015-06-29 20:33:41
decrypt_keys
6d58a126
check_keys
58be5847
c2_server
91.211.17.201
baseport
9587
useragent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0
payload_format
reg
old
0
clientip
icanhazip.com
nr_targets
15
nr_delivery_sites
14
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
WOK12
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://38.124.72.230/wheel12.png
2
https://67.206.96.30/wheel12.png
3
https://208.80.80.111/wheel12.png
4
https://69.8.48.175/wheel12.png
5
https://173.248.22.227/wheel12.png
6
https://69.9.204.114/wheel12.png
7
https://67.219.169.161/wheel12.png
8
https://73.175.203.173/wheel12.png
9
https://69.9.204.16/wheel12.png
10
https://69.9.204.31/wheel12.png
11
https://67.206.97.238/wheel12.png
12
https://69.9.204.36/wheel12.png
13
https://38.124.111.30/wheel12.png
14
https://216.245.211.242/wheel12.png