| MD5 | e1e6e43825d12474697263992bcee8c3 |
| SHA1 | e8f72c2b5c3a15160a3c27eade0d0f4a725df1ef |
| IPs | [50.56.218.189] |
| IPs | [208.73.211.161] |
| IPs | [208.73.211.167] |
| IPs | [208.73.211.176] |
| IPs | [208.73.211.182] |
| IPs | [208.73.211.250] |
| IPs | [50.63.202.40] |
| Domains | [rossroadbags.com] [zonetf.com] [zoneom.com] [127.0.0.1] [zoneak.com] |
| IP Addresses | [50.56.218.189] [208.73.211.161] [208.73.211.167] [208.73.211.176] [208.73.211.182] [208.73.211.250] [50.63.202.40] |
| Antivirus | [Backdoor*Win32/Cycbot.G] |
| [BackDoor-EXI.gen.h] | |
| [Backdoor.Cycbot.B] | |
| [Backdoor.Win32.Gbot] | |
| [BKDR_CYCBOT.SME3] | |
| [Gen*Trojan.Heur.KS.1] | |
| [Generic_r.FN] | |
| [Mal/FakeAV-IS] | |
| [Spyware.Passwords.XGen] | |
| [TR/Kazy.12298.psa] |