Files matching SHA256 checksum a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d

vwykayte2015db5y0kdhlgslj9p7cfwzn0ydaiwiesw7f4agx84o14r0f2gmncb.pp.ua · MAS.zip

Greece · Nova Telecommunications & Media Single Member S.A

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

vwykayte2015db5y0kdhlgslj9p7cfwzn0ydaiwiesw7f4agx84o14r0f2gmncb.pp.ua · MAS.zip

/files/

Greece · Nova Telecommunications & Media Single Member S.A

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

mnt.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

mnt.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

4.f.1.3.f.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

cacao.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

cacao.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

qilk.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

mnt.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

mnt.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

qilk.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

safe.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

silk.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

silk.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

safe.pp.ua · MAS.zip

/files/

Bulgaria · Vivacom Bulgaria EAD

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

4.f.1.3.f.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

safe.pp.ua · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

safe.pp.ua · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

silk.pp.ua · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC

silk.pp.ua · MAS.zip

/files/

· CLOUDFLARENET

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: e541f9bc1839b562deabeadfeb53c15f04553caa
SHA256: a04a8979f93d3db0738b6a298826f49c8149455e5614eb63ffdeb6d7477ee55d
application/zip
483.50KB
2025-08-13 00:25:27 +0000 UTC