| MD5 | 4e209eb3192799b9f3a9c6598b6e4831 |
| SHA1 | efd5da0dd49356166745d06df44fdde489f8bc5a |
| IPs | [185.18.198.243] |
| IPs | [74.53.18.165] |
| IPs | [31.170.163.130] |
| IPs | [89.163.145.49] |
| IPs | [94.23.247.202] |
| Domains | [alopharma.com] [ellagal.com] [hopeisnull.comuf.com] [grenzland-classic.de] [94.23.247.202] |
| IP Addresses | [185.18.198.243] [74.53.18.165] [31.170.163.130] [89.163.145.49] [94.23.247.202] |
| Antivirus | [Downloader-FSH!4E209EB31927] |
| [Troj/Agent-AIFJ] | |
| [Trojan.Badur] | |
| [Trojan.Badur.Win32.3561] | |
| [Trojan.GenericKD.1791223] | |
| [Trojan.MSIL.Injector] | |
| [Trojan.Upatre] | |
| [Trojan.Win32.Cutwail.dkb] | |
| [TrojanDownloader*Win32/Upatre.AA] |