Collection of Upatre Samples ( alpha version)

Overview

Overview of the collected samples.

Statistics

Distribution of selected config values.

IOCs

Network IOCs for the C2 servers and payload delivery sites.

Payloads

MD5 sums of the (decrypted) payloads.

Config File for cdbad6ef5cb24be22764cd9078615f17

md5
cdbad6ef5cb24be22764cd9078615f17
source
virusshare
link
download.4n6?sample=a2d5c1886f4eff6177b2f4ead85c92cb8d6b7c7a11845b9b9a279793008a3c89
malware_name
bsIjON5.exe
temp_file
tmp-4C1B.txt
scandate
0000-00-00 00:00:00
parsed
2015-07-26 03:08:00
decrypt_keys
6ce51a46
check_keys
308d0b2b
c2_server
46.249.3.66
baseport
9587
useragent
Mazilla/5.0
payload_format
reg
old
0
clientip
checkip.dyndns.org
nr_targets
7
nr_delivery_sites
6
nr_delivery_sites_online
0
nr_payloads
0
ksa
pdir
2603uk12
delivered payloads:
no payloads delivered when checked
delivery sites:
1
https://46.160.125.167/2603uk12.pdf
2
https://91.194.239.126/2603uk12.pdf
3
https://93.123.40.17/2603uk12.pdf
4
https://134.249.63.46/2603uk12.pdf
5
https://194.28.191.218/2603uk12.pdf
6
https://195.3.157.218/2603uk12.pdf