Collection of Upatre Samples ( alpha version)

Config File for c79e09c4499c7a7d14812976d840b950

md5
c79e09c4499c7a7d14812976d840b950
source
virusshare
link
download.4n6?sample=14311ec2ae3e1849be8208a49472a83de71ce26e54c23646723113bc935fabfb
malware_name
poxedrv.exe
temp_file
scandate
2015-09-16 11:08:40
parsed
2015-10-03 07:23:14
decrypt_keys
15ae8b2d
check_keys
c2_server
93.185.4.90
baseport
13920
useragent
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.34 (KHTML, like Gecko) Chrome/43.0.2455.81 Safari/535.34
payload_format
sim
old
0
clientip
icanhazip.com
nr_targets
51
nr_delivery_sites
50
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
TIW1
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://24.220.92.193/t30.zip
2
https://176.36.251.208/t30.zip
3
https://67.221.195.6/t30.zip
4
https://69.163.81.211/t30.zip
5
https://216.254.231.11/t30.zip
6
https://24.33.131.116/t30.zip
7
https://104.174.123.66/t30.zip
8
https://72.230.82.80/t30.zip
9
https://173.248.31.6/t30.zip
10
https://69.9.204.114/t30.zip
11
https://188.255.239.34/t30.zip
12
https://69.144.171.44/t30.zip
13
https://65.33.236.173/t30.zip
14
https://98.214.11.253/t30.zip
15
https://24.148.217.188/t30.zip
16
https://173.216.247.74/t30.zip
17
https://77.48.30.156/t30.zip
18
https://37.57.144.177/t30.zip
19
https://95.143.141.50/t30.zip
20
https://87.249.142.189/t30.zip
21
https://85.135.104.170/t30.zip
22
https://76.84.81.120/t30.zip
23
https://84.246.161.47/t30.zip
24
https://217.168.210.122/t30.zip
25
https://68.70.242.203/t30.zip
26
https://64.111.36.52/t30.zip
27
https://178.222.250.35/t30.zip
28
https://94.154.107.172/t30.zip
29
https://194.106.166.22/t30.zip
30
https://188.255.243.105/t30.zip
31
https://188.255.236.184/t30.zip
32
https://98.181.17.39/t30.zip
33
https://67.207.229.215/t30.zip
34
https://67.206.96.68/t30.zip
35
https://67.222.197.54/t30.zip
36
https://67.22.167.163/t30.zip
37
https://209.40.238.170/t30.zip
38
https://64.111.42.64/t30.zip
39
https://72.174.240.148/t30.zip
40
https://63.248.156.246/t30.zip
41
https://72.175.10.116/t30.zip
42
https://208.117.68.78/t30.zip
43
https://162.153.189.143/t30.zip
44
https://72.171.9.146/t30.zip
45
https://67.222.201.61/t30.zip
46
https://209.27.49.117/t30.zip
47
https://67.222.201.222/t30.zip
48
https://109.236.121.91/t30.zip
49
https://203.129.197.50/t30.zip
50
https://45.64.176.132/t30.zip