221.225.56.94 · Office_Tool_with_runtime_v10.1.7.1_x86.zip

/vpn/windows_tools/

China · Chinanet

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample

The password is "infected"