Collection of Upatre Samples ( alpha version)

Overview

Overview of the collected samples.

Statistics

Distribution of selected config values.

IOCs

Network IOCs for the C2 servers and payload delivery sites.

Payloads

MD5 sums of the (decrypted) payloads.

Config File for 9c97c7d701865ec12aeb321802778024

md5
9c97c7d701865ec12aeb321802778024
source
virusshare
link
download.4n6?sample=81caeb2b5e0d9d1d7989f0cea89a22607abfb97b811f7d49595e4c158f587fe5
malware_name
viewfile.exe
temp_file
pis1E43.tmp
scandate
0000-00-00 00:00:00
parsed
2015-06-29 22:40:20
decrypt_keys
1c0317f1
check_keys
6cbb4b77
c2_server
202.153.35.133
baseport
9587
useragent
Mozilla/4.0
payload_format
reg
old
0
clientip
nr_targets
2
nr_delivery_sites
2
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
1501us11
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://petradesign.com/publicd/keys/eulu11.pdf
2
https://jtmcontabil.com/mobi/eulu11.pdf