185.115.97.158 · explorer.exe

/boot/iso/flash/programs/erdcmd/

Russia · Federal State Unitary Enterprise of the Order of the Red Banner of Labour Russian Broad-cast

Yara explorer_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"