| MD5 | e42cbb36bd164ab7ab15a4dbdba82d5d |
| SHA1 | 8b775d2cf1617bfcde4bf2926ec35d20835c8199 |
| Domains | [granchhunting.com] [nakulsales.com] |
| IP Addresses | [209.237.150.20] [216.157.85.127] |
| Antivirus | [Downloader-FSH!E42CBB36BD16] |
| [TR/Dldr.Upatre.O] | |
| [Troj/Upatre-Y] | |
| [Trojan*W32/Agent.DUTE] | |
| [Trojan-Downloader.Win32.Upatre] | |
| [Trojan-Spy.Win32.Zbot.rrgz] | |
| [Trojan.954BBEF304B430EE] | |
| [Trojan.Downloader.RRE] | |
| [Trojan.DownLoader9.61188] |