167.71.178.92 · Invoke-NinjaCopy.ps1

/tradecraftlabs/fhlbc/PowerSploit/Exfiltration/

·

Yara Empire_PowerShell_Framework_Gen2 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"