Description

• Probable Name: Upatre
• MD5: b8fc436bab8c22cdfa2d4d137358ca93
• SHA1: fe545fd99a9f7b98483e57d3249706ede5e76d2d
  
• SHA256: 8e45ab1536864c8a23591fffc0266e1dab1787845e75ba5f25e0383a9388ec36
• Duration: 21.47hs

• Zip password: infected

• Infected IP address: 10.0.2.105

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Sat May 28 13:09:48 CEST 2016

started win5

Sat May 28 13:12:23 CEST 2016

infected

The CC port is not open and the malware keeps connecting for a long time. Summary:

• The malware binary file is working
• The CC server is working.
• The support CC connections were still being looked for.

Sun May 29 10:38:11 CEST 2016

poweroff