Collection of Upatre Samples ( alpha version)

Config File for c8e116bdb1f98c6b9161c7dde738cd0f

md5
c8e116bdb1f98c6b9161c7dde738cd0f
source
malwr
link
https://malwr.com/analysis/NTRmMjM0NDk4M2QxNGE0ZmFmMjlkY2I2ZWY0NmIyNjQ/
malware_name
docuview.exe
temp_file
tempCFA8.txt
scandate
2015-04-01 00:56:23
parsed
2015-06-26 00:24:07
decrypt_keys
533021d8
check_keys
6451ae17
c2_server
141.105.141.87
baseport
9587
useragent
Mazilla/5.0
payload_format
reg
old
0
clientip
checkip.dyndns.org
nr_targets
3
nr_delivery_sites
2
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
3103us13
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://ebuyswap.co.uk/mandoc/muz3.rtf
2
https://eastmountinc.com/mandoc/muz3.rtf