Collection of Upatre Samples ( alpha version)

Config File for 5c28d3aeabf4685d3652c8864c02c08d

md5
5c28d3aeabf4685d3652c8864c02c08d
source
malwr
link
https://malwr.com/analysis/Mjg5NDU2MzE2ZjcwNGE5ZTg3OTIzNGEwZDA4NzQxNjk/
malware_name
nicinstall.exe
temp_file
AST99F0.log
scandate
2015-02-18 08:43:13
parsed
2015-06-25 23:36:48
decrypt_keys
413c6989
check_keys
25cb3283
c2_server
31.43.236.251
baseport
9587
useragent
Mazilla/5.0
payload_format
reg
old
0
clientip
checkip.dyndns.org
nr_targets
3
nr_delivery_sites
2
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
1802us12
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://gumtek.com/wp-includes/pomo/sw_docb.pdf
2
https://olivetv.uk.com/strobe/sw_docb.pdf