Collection of Upatre Samples ( alpha version)

Config File for 6591e0c8a6b16ab6b8ca34175ba98e75

md5
6591e0c8a6b16ab6b8ca34175ba98e75
source
malwr
link
https://malwr.com/analysis/ZjM5ZmMyOWEzMDQyNDMwZmEzNDI2NTJkODNmMzQ1OTU/
malware_name
docuview.exe
temp_file
tempCFA8.txt
scandate
2015-05-20 03:13:53
parsed
2015-06-25 23:44:00
decrypt_keys
533021d8
check_keys
6451ae17
c2_server
141.105.141.87
baseport
9587
useragent
Mazilla/5.0
payload_format
reg
old
0
clientip
checkip.dyndns.org
nr_targets
3
nr_delivery_sites
2
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
3103us13
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://ebuyswap.co.uk/mandoc/muz3.rtf
2
https://eastmountinc.com/mandoc/muz3.rtf