106.75.214.186 · MAS_AIO.cmd.exe

/xbzsg/

China · China Unicom Shanghai network

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"