Files named wincdemu-4.1.exe

92.77.119.5 · wincdemu-4.1.exe

/fun/Download/

Germany · Vodafone GmbH

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6ea5cb4fa2e058172d5bc9b3499cb0ecf0e69069
SHA256: 7716e2e5165402bc3337147ee555bc1b4641fe5fdfdc72329e08753697fe1b90
application/x-msdos-program
1.62MB
2017-07-09 21:48:22 +0000 UTC
178.7.126.78 · wincdemu-4.1.exe

/fun/Download/

Germany · Vodafone GmbH

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6ea5cb4fa2e058172d5bc9b3499cb0ecf0e69069
SHA256: 7716e2e5165402bc3337147ee555bc1b4641fe5fdfdc72329e08753697fe1b90
application/x-msdos-program
1.62MB
2017-07-09 21:48:22 +0000 UTC
178.7.126.78 · wincdemu-4.1.exe

/fun/Download/

Germany · Vodafone GmbH

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6ea5cb4fa2e058172d5bc9b3499cb0ecf0e69069
SHA256: 7716e2e5165402bc3337147ee555bc1b4641fe5fdfdc72329e08753697fe1b90
application/x-msdos-program
1.62MB
2017-07-09 21:48:22 +0000 UTC
178.7.126.78 · wincdemu-4.1.exe

/fun/Download/

Germany · Vodafone GmbH

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6ea5cb4fa2e058172d5bc9b3499cb0ecf0e69069
SHA256: 7716e2e5165402bc3337147ee555bc1b4641fe5fdfdc72329e08753697fe1b90
application/x-msdos-program
1.62MB
2017-07-09 21:48:22 +0000 UTC