Files matching SHA256 checksum 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff

cdn.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC
cjkk.site · MonSound6.uax.zip

/l2meta/updater/sounds/

Germany · Hetzner Online GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC
cdn-ru.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

Russia · Jsc timeweb

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 02:59:15 +0000 UTC
cdn.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC