| MD5 | d44b0f22b78c3cecb825241388d7d0fe |
| SHA1 | e623d38b933251be666db2d26e343351104b0b98 |
| Filename | cheshire.exe |
| Domains | [twelvecaught.net] [ratherstrong.net] [morningstrong.net] [rathertrouble.net] [morningtrouble.net] [ratherpresident.net] [morningpresident.net] [rathercaught.net] [morningcaught.net] [strangestrong.net] |
| IP Addresses | [76.12.152.59] [49.156.19.20] [195.22.28.198] |
| Antivirus | [BackDoor-FCYZ!D44B0F22B78C] |
| [Downloader.Upatre] | |
| [Mal/Bayrob-B] | |
| [Malware-gen*Win32*Malware-gen] | |
| [TR/AD.Nivdort.Y.2531] | |
| [Trojan.Agent.BONJ] | |
| [Trojan.Bayrob] | |
| [Trojan.Win32.Scar.mevi] | |
| [TrojanSpy*Win32/Nivdort.CE*Trojan] |