| MD5 | 686c37149daf3a118e5bfec97994e0d5 | 
| SHA1 | efacacccddc354eac69ef484e140ded88a0fe972 | 
| Domains | [icanhazip.com] [ddos.dnsnb8.net] | 
| IP Addresses | [104.238.141.75] [104.238.136.31] [104.238.145.30] | 
| Antivirus | [Downloader.Upatre!gen5] | 
| [Troj/Dyreza-HX] | |
| [Trojan-Downloader.Win32.Upatre.emvu] | |
| [Trojan.DownLoader15.48787] | |
| [Trojan.Girtk.DUAO.pwer] | |
| [Trojan.Kryptik.Win32.778633] | |
| [Trojan.Upatre] | |
| [Trojan.Upatre.FL] | |
| [TrojanDownloader*Win32/Upatre] | |
| [TrojanDownloader.Upatre] |