| MD5 | 66c0d28981bdfc8f21e3bd1112bd709d |
| SHA1 | 5ab8893492b3254c99bb94d359cfb0d76190c28f |
| Domains | [hnb.net] [firecheerleaders.fr] [ladiesdehaan.be] [chonburicoop.net] [passlift.com] [actionpourisrael.com] |
| IP Addresses | [222.165.133.242] [213.186.33.171] [62.210.92.9] [27.254.96.151] [217.116.196.239] [213.186.33.4] |
| Antivirus | [Mal/Wonton-BZ] |
| [Ransom*Win32/Tescrypt.A] | |
| [Trojan-Ransom.Win32.Bitman.ile] | |
| [Trojan.Encoder.3817] | |
| [Trojan.MalPack.PK] | |
| [TROJ_FORUCON.BMC] | |
| [W32/Kryptik.ENJD!tr] | |
| [W32/Rovnix.C.gen!Eldorado] | |
| [Win32*Malware-gen] | |
| [Win32/Kryptik.ENJD] |