| MD5 | 8855f4d2f1ad7b2e17d993be93b24364 |
| SHA1 | e2256548effaf92e5540fca4aadd5127bbe3e1de |
| IPs | [184.168.221.51] |
| IPs | [89.31.143.13] |
| IPs | [50.63.202.52] |
| IPs | [50.63.103.1] |
| Domains | [quietbeauty.net] [trademillion.net] [nightheart.net] [nightmayor.net] [seasonreport.net] [seasonbeauty.net] [quietgarden.net] [seasongarden.net] [againsttoward.net] [doubttoward.net] |
| IP Addresses | [184.168.221.51] [89.31.143.13] [50.63.202.52] [50.63.103.1] |
| Antivirus | [Backdoor] |
| [Generic_r.BYW] | |
| [RDN/Downloader.a!tq] | |
| [Troj/Agent-AAHQ] | |
| [Trojan.Agent] | |
| [Trojan.Win32.Generic*Trojan.Win32.PEF.pf.silent.356631*Trojan.Win32.PEF.pf.silent.452448*Trojan.Win32.PEF.pf.silent.457538] | |
| [TrojanDownloader*Win32/Nivdort.E] | |
| [TrojanSpy.Nivdort.S3] |