| MD5 | 4f7d0753b9218f580ee72b573b44a89f |
| SHA1 | 7bdb9517b7f406ecf76d9d004edbba840ac75ca4 |
| Domains | [www.update.microsoft.com.nsatc.net] [www.update.microsoft.com] [morphed.ru] [amnsreiuojy.ru] |
| IP Addresses | [134.170.58.222] [134.170.58.221] |
| Antivirus | [Backdoor.Androm.Win32.923] |
| [BackDoor.Andromeda.178] | |
| [Backdoor.Win32.Androm] | |
| [Mal/Inject-EA] | |
| [Packed.Dromedan!gen7] | |
| [TR/Rogue.19560] | |
| [Trojan.4B480FD503BAB5A2] | |
| [Trojan.Ransom.Blocker] | |
| [W32/Gamarue.C.gen!Eldorado] | |
| [W32/Kryptik.BBYD!tr] |