Files matching SHA256 checksum e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b

yy.q2s5.my · CNC-1.13.1-arm64.apk

/

Hong Kong · I LAYER LIMITED

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

dan.umlsy.top · CNC-1.13.1-arm64.apk

/

Hong Kong · I LAYER LIMITED

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

ee.umlsy.top · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

uu.q2s5.my · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

yy.q2s5.my · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

dmhm.vialy.cn · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

test5.vialy.cn · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

www.ranfaka.vip · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

outline03.cn · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

wanboka.com · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

www.wanboka.com · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

tee.tieace.top · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

cmy.f95he.my · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

xiaoxi.one · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

awy.f95he.my · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

ee.umlsy.top · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

www.wwxx66.vip · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

wwxx66.vip · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

www.919cdk.cn · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC

919cdk.cn · CNC-1.13.1-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
application/octet-stream
38.11MB
2026-09-19 01:10:31 +0000 UTC