| MD5 | a175c5ac2f76a853fa307862b6682142 |
| SHA1 | 1def9e6fea989892c36b6bf20c76f7239125f392 |
| Domains | [www.update.microsoft.com.nsatc.net] [faumoussuperstars.ru] [powerrembo.ru] [update.microsoft.com] [109.120.180.29] [lunaizemlya.ru] |
| IP Addresses | [134.170.58.222] [191.232.80.55] [109.120.155.30] |
| Antivirus | [Backdoor.Androm.Win32.25514] |
| [BackDoor.Andromeda.614] | |
| [Malware-gen*Win32*Malware-gen] | |
| [Trojan.Kovter.ED] | |
| [W32/Agent.XL.gen!Eldorado] | |
| [W32/Kryptik.DUQR!tr] | |
| [Win32/Kryptik.DUQR] | |
| [Worm*Win32/Gamarue.AU] |