Files named clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: bf113fa373776e69055d91a4dff2dca720b4f7d7
SHA256: 00889f7964f39ec55fce4a224d681e4e18581f35512e9768463075cd6fdb8e68
application/zip
13.52MB
2026-08-31 05:52:06 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a9a581a0dd376a3b491b66da4ee6ffcfa0913af7
SHA256: e491f998a9b543b0dd782dee2fc8f5bb0772f78bc561b2da4b4f81a28e0dcd4a
application/zip
5.77MB
2025-12-27 13:57:34 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

/update/cloudschool_v2_test/

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 8642d53a9e494b755721cfc2599835ce9915a439
SHA256: 54d58fd87618bae54543fa301afd500010d4524ec1af80892b8d60e3287d1b60
application/zip
5.78MB
2026-03-01 15:37:53 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
application/zip
13.52MB
2026-08-31 05:52:11 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: bf113fa373776e69055d91a4dff2dca720b4f7d7
SHA256: 00889f7964f39ec55fce4a224d681e4e18581f35512e9768463075cd6fdb8e68
application/zip
13.52MB
2026-08-31 05:52:06 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a9a581a0dd376a3b491b66da4ee6ffcfa0913af7
SHA256: e491f998a9b543b0dd782dee2fc8f5bb0772f78bc561b2da4b4f81a28e0dcd4a
application/zip
5.77MB
2025-12-27 13:57:34 +0000 UTC

sayhellohi.duckdns.org · clfSchool.zip

/update/cloudschool_v2_test/

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 8642d53a9e494b755721cfc2599835ce9915a439
SHA256: 54d58fd87618bae54543fa301afd500010d4524ec1af80892b8d60e3287d1b60
application/zip
5.78MB
2026-03-01 15:37:53 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
application/zip
13.52MB
2026-08-31 05:52:11 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

/update/cloudschool_v2_test/

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
application/zip
13.52MB
2026-08-31 05:52:11 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: bf113fa373776e69055d91a4dff2dca720b4f7d7
SHA256: 00889f7964f39ec55fce4a224d681e4e18581f35512e9768463075cd6fdb8e68
application/zip
13.52MB
2026-08-31 05:52:06 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: bf113fa373776e69055d91a4dff2dca720b4f7d7
SHA256: 00889f7964f39ec55fce4a224d681e4e18581f35512e9768463075cd6fdb8e68
application/zip
13.52MB
2026-08-31 05:52:06 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a9a581a0dd376a3b491b66da4ee6ffcfa0913af7
SHA256: e491f998a9b543b0dd782dee2fc8f5bb0772f78bc561b2da4b4f81a28e0dcd4a
application/zip
5.77MB
2025-12-27 13:57:34 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a9a581a0dd376a3b491b66da4ee6ffcfa0913af7
SHA256: e491f998a9b543b0dd782dee2fc8f5bb0772f78bc561b2da4b4f81a28e0dcd4a
application/zip
5.77MB
2025-12-27 13:57:34 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 8642d53a9e494b755721cfc2599835ce9915a439
SHA256: 54d58fd87618bae54543fa301afd500010d4524ec1af80892b8d60e3287d1b60
application/zip
5.78MB
2026-03-01 15:37:53 +0000 UTC

cloudinc.direct.quickconnect.to · clfSchool.zip