| MD5 | 821e973a33f31a6dda9a370e7c75aac8 |
| SHA1 | 67e7c3164b486d0ec4a72cdf31f18c6fdc5d7db2 |
| Filename | Documents.exe |
| IPs | [141.8.224.183] |
| IPs | [204.13.161.109] |
| Domains | [h1.ripway.com] [www.balu000.0catch.com] [www.balu001.0catch.com] [www.balu002.0catch.com] [www.balu003.0catch.com] [www.balu004.0catch.com] [www.balu005.0catch.com] [www.balu006.0catch.com] [www.balu007.0catch.com] [www.balu008.0catch.com] |
| IP Addresses | [141.8.224.183] [204.13.161.109] |
| Antivirus | [<W32/Autorun.SX] |
| [Gen:Trojan.Heur.AutoIT.2] | |
| [Heur.Suspicious] | |
| [Obfuscated.H5!genr] | |
| [PE:Trojan.Win32.Generic.1237B532!305640754] | |
| [Trojan-Downloader.Autoit.gen] | |
| [Trojan.Agent/Gen-Autorun] |