Details
Robot
FileName
Malware Family PredatorPain
Date Added 2016-04-24 06:49:23
MD5 e934fd394e3be2d54abbd046ec3b0787
Sha256 f4bbe6f9c506acd5e7b15a01d34a93a8aa4b1095e1cade94e200325563ced196
Robot Robots lovingly delivered by robohash.org
Advertising
C2 Data
SMTP Server mail.future-furnitures.com
PHP Link http://www.example.com/directory/logs.php
Bound Files False
Use Email yesemail
Email Address slimmy@future-furnitures.com
FTP Pass ftppassword
SMTP Port 587
Download & Exec Disabledownloader
Use FTP noftp
FTP Host ftp.host.com
FTP User username
Email Password bettermoney3490
Use PHP nophp
Interval Timer 900000
Version Predator Pain v14
Virustotal

43 out of 57 AV Engines identified the sample as Malicious.

Virustotal Report

C2 Information
Domain FQDN IP Country Code
ddns.net hexormahmoud1.ddns.net 192.168.88.193 0