Timeline

• Probable Upatre
• VirusTotal of zip
• VirusTotal of exe
• MD5 of zip: 9f620b924910764bc5d3fa8fa0f1aab9
• MD5 of exe: 8add936de663ba9cd5e0097beff8783d
• Duration: 17.4 days
• IP of infected host: 10.0.2.104

Approx 07 Nov 2013

infected

Approx 24 Nov 2013

stopped