Files named nir.exe

185.115.97.158 · nir.exe

/iso/dg/MBTY/

·

Yara HackTool_Producers From Florian Roth

Download archived sample
The password is "infected"

SHA1: 5397c51b796c6d3293a2339dc4839178824fdb73
SHA256: 02cc93b877030065e7ee449334864e49981d99015b95b4d4c0e5eb12bdf43814
application/octet-stream
57.50KB
2009-05-26 15:47:18 +0000 UTC
185.115.97.158 · nir.exe

/iso/dg/MBTY/

Russia · JSC Russian Broadcasting and Notification Networks

Yara HackTool_Producers From Florian Roth

Download archived sample
The password is "infected"

SHA1: 5397c51b796c6d3293a2339dc4839178824fdb73
SHA256: 02cc93b877030065e7ee449334864e49981d99015b95b4d4c0e5eb12bdf43814
application/octet-stream
57.50KB
2009-05-26 15:47:18 +0000 UTC
185.115.97.158 · nir.exe

/boot/iso/dg/MBTY/

Russia · Federal State Unitary Enterprise of the Order of the Red Banner of Labour Russian Broad-cast

Yara HackTool_Producers From Florian Roth

Download archived sample
The password is "infected"

SHA1: 5397c51b796c6d3293a2339dc4839178824fdb73
SHA256: 02cc93b877030065e7ee449334864e49981d99015b95b4d4c0e5eb12bdf43814
application/octet-stream
57.50KB
2009-05-26 15:47:18 +0000 UTC
ssl.chernikov.pw · nir.exe

/Microsoft/MiniXP Last/Soft/USB/DirectGRUB/MBTY/

Russia · HURRICANE

Yara HackTool_Producers From Florian Roth

Download archived sample
The password is "infected"

SHA1: 5397c51b796c6d3293a2339dc4839178824fdb73
SHA256: 02cc93b877030065e7ee449334864e49981d99015b95b4d4c0e5eb12bdf43814
application/octet-stream
57.50KB
2021-04-13 19:35:12 +0000 UTC