193.38.55.230 · IPBan-Windows-x86_2_0_1.zip

/

The Netherlands · WorkTitans B.V.

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"