Files named VMS电脑客户端.exe

42.242.72.213 · VMS电脑客户端.exe

/NVR/

China · Chinanet

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 3a6df38405fbeda95311fd8a045bde2981843dd5
SHA256: 071b79a81d632c213a0f91d161489bcc6b4ef9996883785fdb0b2f793a32b390
application/octet-stream
24.81MB
2022-02-18 05:13:04 +0000 UTC
42.242.72.158 · VMS电脑客户端.exe

/NVR/

China · Chinanet

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 994e1d64fa24dfb6e92c330bca573553ee7240fd
SHA256: 49e272180adf05afcc43e8d80c75f654ee1cbb246218fba9ebdefc18c0625ddc
application/octet-stream
24.81MB
2022-02-18 05:13:04 +0000 UTC
42.242.73.40 · VMS电脑客户端.exe

/NVR/

China · Chinanet

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 994e1d64fa24dfb6e92c330bca573553ee7240fd
SHA256: 49e272180adf05afcc43e8d80c75f654ee1cbb246218fba9ebdefc18c0625ddc
application/octet-stream
24.81MB
2022-02-18 05:13:04 +0000 UTC