Files named zdesktop_2_0_b10580_win32.msi

213.141.136.242 · zdesktop_2_0_b10580_win32.msi

/winsoft/all/zimbradesktop/

Russia · PJSC MegaFon

SHA1: 271738ff5ba337ce2f8a453221f3dda694d262f5
SHA256: 94b3c1f3fda1d11031179a98863982f606fc6703e6632afaa0831ef84135e721
application/octet-stream
77.84MB
2010-10-12 00:54:17 +0000 UTC
mirror.ipnp.su · zdesktop_2_0_b10580_win32.msi

/winsoft/all/zimbradesktop/

Russia · PJSC MegaFon

Yara Embedded_RTF_File From AbuseCH by Nicholas Dhaeyer - @DhaeyerWolf

Download archived sample
The password is "infected"

SHA1: ee7e054107a0e06486c2794d337625e5cb08a162
SHA256: 5c8993f462f6467a0cda4e6a577c3eff9f0876e09fda0aedf3370df1029c5d44
application/octet-stream
77.84MB
2010-10-12 00:54:17 +0000 UTC
mirror.ipnp.su · zdesktop_2_0_b10580_win32.msi

/winsoft/all/zimbradesktop/

Russia · PJSC MegaFon

SHA1: 86befaf685b5433a06c1970d0b003e01154bd160
SHA256: ff78909ebe57cbd2f4a214ec0d130d38262f9369eaa5766cff1a246716b12eff
application/octet-stream
77.84MB
2010-10-12 00:54:17 +0000 UTC
mirror.ipnp.su · zdesktop_2_0_b10580_win32.msi

/winsoft/all/zimbradesktop/

Russia · PJSC MegaFon

Yara Embedded_RTF_File From AbuseCH by Nicholas Dhaeyer - @DhaeyerWolf

Download archived sample
The password is "infected"

SHA1: ee7e054107a0e06486c2794d337625e5cb08a162
SHA256: 5c8993f462f6467a0cda4e6a577c3eff9f0876e09fda0aedf3370df1029c5d44
application/octet-stream
77.84MB
2010-10-12 00:54:17 +0000 UTC
mirror.ipnp.su · zdesktop_2_0_b10580_win32.msi

/winsoft/all/zimbradesktop/

Russia · PJSC MegaFon

Yara Embedded_RTF_File From AbuseCH by Nicholas Dhaeyer - @DhaeyerWolf

Download archived sample
The password is "infected"

SHA1: ee7e054107a0e06486c2794d337625e5cb08a162
SHA256: 5c8993f462f6467a0cda4e6a577c3eff9f0876e09fda0aedf3370df1029c5d44
application/octet-stream
77.84MB
2010-10-12 00:54:17 +0000 UTC