MD5 - E0E5647B1FE83BB3E67105C63FF7E210

[sowhat-x]

hxxp://www.99999999999.com.cn/XQDBHO5.exe

28.13% detection rate at VirusTotal...
and the few AVs find it suspicious because of the...upx layer over it.
F-Secure/Icarus/Norman though recognize it as a "Banload" variant.

[JohnC]

Thank you.