Files named n.zip

149.81.74.204 · n.zip

/html/

United States · SOFTLAYER

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_Obfuscted_PowerShell_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ad2980999a8440f1894e0e98918fd6cde028b604
SHA256: d0cc999763f19199cc5e51be49c89b1d6620569f92cd8ea606da05728f097708
application/zip
33.10MB
2025-01-14 10:50:13 +0000 UTC
149.81.74.204 · n.zip

/html/

United States · SOFTLAYER

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_Obfuscted_PowerShell_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ad2980999a8440f1894e0e98918fd6cde028b604
SHA256: d0cc999763f19199cc5e51be49c89b1d6620569f92cd8ea606da05728f097708
application/zip
33.10MB
2025-01-14 10:50:13 +0000 UTC
demo.shweio.com · n.zip

/

Singapore · DIGITALOCEAN-ASN

SHA1: 4d97a84a404f7e0b6c318f59bde7cc0c88c1afd9
SHA256: f68840280e14b505698d70ab9e2d8e479b7a4c00513c11bcec413479affdd610
application/zip
3.78KB
2024-11-26 05:11:50 +0000 UTC
149.81.74.204 · n.zip

/html/

United States · SOFTLAYER

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_Obfuscted_PowerShell_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ad2980999a8440f1894e0e98918fd6cde028b604
SHA256: d0cc999763f19199cc5e51be49c89b1d6620569f92cd8ea606da05728f097708
application/zip
33.10MB
2025-01-14 10:50:13 +0000 UTC
149.81.87.18 · n.zip

/html/

United States · SOFTLAYER

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_Obfuscted_PowerShell_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ad2980999a8440f1894e0e98918fd6cde028b604
SHA256: d0cc999763f19199cc5e51be49c89b1d6620569f92cd8ea606da05728f097708
application/zip
33.10MB
2025-01-14 10:50:13 +0000 UTC
www.clean360ng.com · n.zip

/

United States · NAMECHEAP-NET

SHA1: 357ca6d6df028a358eebb675107b37b9ae5ee4b2
SHA256: 3a0db6f04e85a106f9c5a21fa414b6d6cb568b3dc7dc05271fdab6dd8080ad21
application/zip
765.12MB
2025-06-02 09:50:10 +0000 UTC
clean360ng.com · n.zip

/

United States · NAMECHEAP-NET

SHA1: c9d3bbeb40a185396b52d76bab998234bc728397
SHA256: d2958bd731add3e5a95098244968b624c1c1f58d0754f935f9101fdd8bf47cdc
application/zip
765.12MB
2025-06-02 09:50:10 +0000 UTC
xn--mgbbgc7ke.life.vorod-samane.shop · n.zip

/

Iran · Mizban Dadeh Roham Co

SHA1: 128a07bfd3220d3cc0e75b61a8beb450b097a7c5
SHA256: 05f4a513740ff08bf8497feb125a436e2ff33dabd4100d117e9d04282e0a6443
application/zip
19.38MB
2025-06-11 17:07:22 +0000 UTC
xn--mgbbgc7ke.life · n.zip

/

Iran · Mizban Dadeh Roham Co

SHA1: 128a07bfd3220d3cc0e75b61a8beb450b097a7c5
SHA256: 05f4a513740ff08bf8497feb125a436e2ff33dabd4100d117e9d04282e0a6443
application/zip
19.38MB
2025-06-11 17:07:22 +0000 UTC
www.xn--mgbbgc7ke.life.vorod-samane.shop · n.zip

/

Iran · Mizban Dadeh Roham Co

SHA1: 128a07bfd3220d3cc0e75b61a8beb450b097a7c5
SHA256: 05f4a513740ff08bf8497feb125a436e2ff33dabd4100d117e9d04282e0a6443
application/zip
19.38MB
2025-06-11 17:07:22 +0000 UTC
demo.shweio.com · n.zip

/

Singapore · DIGITALOCEAN-ASN

SHA1: 4d97a84a404f7e0b6c318f59bde7cc0c88c1afd9
SHA256: f68840280e14b505698d70ab9e2d8e479b7a4c00513c11bcec413479affdd610
application/zip
3.78KB
2024-11-26 05:11:50 +0000 UTC
149.81.74.205 · n.zip

/html/

United States · SOFTLAYER

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_Obfuscted_PowerShell_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ad2980999a8440f1894e0e98918fd6cde028b604
SHA256: d0cc999763f19199cc5e51be49c89b1d6620569f92cd8ea606da05728f097708
application/zip
33.10MB
2025-01-14 10:50:13 +0000 UTC
www.descargas.juegomania.org · n.zip

/pc/12/12185/descargas/

France · OVH SAS

SHA1: 74c5926d105b996d9d443ae73d1b54cbf329cc9b
SHA256: 3b15753108f73896c62f0df0593ae3f2d67d3d002ff27f310eeef9e16710da47
application/zip
1.26MB
2008-02-29 21:26:45 +0000 UTC
www.mr-codm.ir · n.zip

//panel2/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-11-21 12:34:01 +0000 UTC
mail.mr-codm.ir · n.zip

//panel2/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-11-21 12:34:01 +0000 UTC
www.mr-codm.ir · n.zip

//panel/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-08-18 01:38:51 +0000 UTC
mr-codm.ir · n.zip

//panel2/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-11-21 12:34:01 +0000 UTC
mail.mr-codm.ir · n.zip

//panel/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-08-18 01:38:51 +0000 UTC
mr-codm.ir · n.zip

//panel/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: ca719fcd11e7145f96964a9f264afbcc9aed9230
SHA256: 4991cd82a9bede7e090ded49e2f280712328ea44310aed670a56f385731ad362
application/zip
7.09MB
2024-08-18 01:38:51 +0000 UTC
www.racoo.net · n.zip

/

Germany · Contabo GmbH

SHA1: 601533ad44820c52be7938d1f31d06304df7de6e
SHA256: cf9d767ba63373e1400fc9a4d74b2d8866d88c11556eb86e1a31ea3c94faeb6b
application/zip
98.66MB
2024-02-19 14:25:14 +0000 UTC