| MD5 | c3b2548cc176c6f7c7824e5896ae56cd |
| SHA1 | 5bd98e8f146300c338b82e53f15c364fb5c7c2ae |
| Filename | Win32.Backdoor. Andromeda.b-c3b2548cc176c6f7c7824e5896ae56cd.exe0 |
| Domains | [europe.pool.ntp.org] [update.microsoft.com] [and4.junglebeariwtc1.com] [and4.junglebeariwtc2.com] [and4.junglebeariwtc3.com] [and4.junglebeariwtc4.com] [and4.junglebeariwtc5.com] |
| IP Addresses | [217.198.219.102] [65.55.50.157] [217.23.13.221] [127.0.0.1] |
| Antivirus | [Ransom.Crowti.B4] |
| [TR/Dropper.A.38684] | |
| [Trj/Chgt.O] | |
| [Trojan.Deshacop!] | |
| [Trojan.Deshacop.Win32.67] | |
| [Trojan.Dynamer.A4] | |
| [Trojan.FakeJava.ED] | |
| [Trojan.Win32.Deshacop.dsfmok] | |
| [Trojan.Win32.Deshacop.eu] | |
| [Trojan.Win32.Lethic] |