Files named marketing-site.zip

www.smart-lms.smartreturn.com.eg · marketing-site.zip

/

France · Contabo GmbH

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 24e06bf89795890c0373257b12eab73147725e78
SHA256: 0b6584ecbcf77b04465c1acf668e309a1998715c396902299157eded8a261e64
application/zip
57.94MB
2026-09-28 21:59:52 +0000 UTC
www.smart-lms.smartreturn.com.eg · marketing-site.zip

/

France · Contabo GmbH

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: c4f30d969e43db01b121b9fc016e6218765b48ab
SHA256: bccbaaed433d00beafbe5fe5957f15f6d713138eee5593bd1a2ae39cb0d2853b
application/zip
57.94MB
2026-09-28 21:59:52 +0000 UTC
smart-lms.smartreturn.com.eg · marketing-site.zip

/

France · Contabo GmbH

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: d86b2528f6156f9fe6e0a207641a6518a1e1e1d2
SHA256: 2033bd0e13d8b60dc51a7df4833a2f2ec35f4c04f5e77a80295c51d494f13770
application/zip
57.94MB
2026-09-28 21:59:52 +0000 UTC
smart-lms.smartreturn.com.eg · marketing-site.zip

/

France · Contabo GmbH

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 396a0823cfa52956a4483194534e5488db6f9f48
SHA256: ca152a1c7f4fa9d6aefa55a15fd5a1f9a3c45703822daf56f07f89c666f004c0
application/zip
57.94MB
2026-09-28 21:59:52 +0000 UTC