Timeline

• Probable Upatre
• VirusTotal of zip
• VirusTotal of exe
• MD5 of exe: 8add936de663ba9cd5e0097beff8783d
• SHA1: df2b08bfb68a492f018afdffb9d0ed349c067f3c
• SHA256: 27dd3808d50bc690e155b2687fe0e67083882f1d9493437343e27255ccd95ad4
• The password of the zip is: infected

• Duration: 24.6 days

• VirusTotal
• HybridAnalysis

• RobotHash

Thu, 31 Oct 2013 13:41:08

infected

Approx Nov 24 2013

stopped