Collection of Upatre Samples ( alpha version)

Config File for 8f4e506a5a3c9bd108e3dff986beea9a

md5
8f4e506a5a3c9bd108e3dff986beea9a
source
malwr
link
https://malwr.com/analysis/OTA4YWY4NDE2ZjdjNGZhOTkwZTA1MmUxMmU1MzE5MmQ/
malware_name
vipsetup.exe
temp_file
vipiBF23.tmp
scandate
2015-05-05 13:53:02
parsed
2015-07-25 23:12:52
decrypt_keys
28957618
check_keys
318311bd
c2_server
190.111.9.129
baseport
9587
useragent
Mazilla/5.0
payload_format
reg
old
0
clientip
checkip.dyndns.org
nr_targets
3
nr_delivery_sites
2
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
0303no11
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://kerrydrivinglessons.com/logs/neln.pdf
2
https://scenicsands.com/gbook/neln.pdf