APT 34 is believed to be a hacking group within the Ministry of Intelligence of Iran. The files contain malware source code, PowerShell Payload, a server-side module which is the c2 made in node.js, and ASP Webshell, dubbed “HighShell” which has more than 30k lines of code.