Benign Download

132.148.141.38WueV3S6ZJPxgj6V-M8HDrgAAAAE.wso.scans

Encoded content decoded: base64Text adds a native connect call
SHA-2560e0f9ad5d5388c21e324f36e2cdf8978f5a0e03ce4461bc6c64f59b9e982137c
MaleculeO(C)Md

Evidence

Encoded content decoded: base64 lines 14–17
14:15… I7IGV4aXQgMDsKc3ViIG1haW4KewpteSAkc19ob3N0ID0gc2hpZnQ7IG15ICRz
15X3BvcnQgPSBzaGlmdDsgbXkgJHNfcGF0aCA9IHNoaWZ0OyBteSAkc19uc2V4ID0gc2hpZnQ7Cmlm
16ICgkXk8gbmUgIk1TV2luMzIiKQp7CnVzZSBQT1NJWCBxdyhzZXRzaWQpOwpyZXR1cm4gdW5sZXNz
17IGRlZmluZWQgKG15ICRja …
English function-word token "for" lines 17–20
17:67… NJWDo6c2V0
18c2lkKCk7CiRTSUd7JF99ID0gIklHTk9SRSIgZm9yIChxdyAoSFVQIElOVCBJTEwgRlBFIFFVSVQg
19QUJSVCBVU1IxIFNFR1YgVVNSMiBQSVBFIEFMUk0gVEVSTSBDSExEKSk7CnVtYXNrIDA7CmNoZGly
20ICIvIjsKb3BlbiAoU1RESU4sICI8L2Rldi9udWxsIik7Cm9wZW4g …
Text adds a native connect call lines 134–137
134:15… thZGRyX2luKDI1LCAkc19uc2V4KTsgfSBlbHNlIHsgJG5hbWVzZXJ2ZXIgPSBz
135b2NrYWRkcl9pbig1MywgJG5hbWVzZXJ2ZXIpOyB9CnVubGVzcyAoJHNvY2tldC0+Y29ubmVjdCgk
136bmFtZXNlcnZlcikpCnsKaWYgKCQhICE9ICRlaXByb2dyICYmICQhICE9ICRld2Jsb2NrKQp7CmNs
137b3NlICRzb2NrZXQ7CiRiLT57dW5sdWNreX1bMF0gKys7Cmlm …
English function-word token "and" lines 566–571
566:16… pfSQvKQp7CiRzcGVjID0gJDIgPiA2NCA/IDY0IDogJDI7CiRzcGVjID0gJDEg
567PCAkc3BlYyA/ICgkMSArIGludCByYW5kICgxICsgJHNwZWMgLSAkMSkpIDogJHNwZWM7Cn0KZWxz
568ZQp7CiRzcGVjID0gbGVuZ3RoICRsaW5lOwokc3BlYyA9IDEgKyAoJHNwZWMgPiA2NCA/IGludCBy
569YW5kIDY0IDogaW50IHJhbmQgJHNwZWMpOwp9CiRsaW5lID0gW3NwbGl0ICgvLywgJGxpbmUpXTsK
570JGxpbmUgPSBqb2luICgnJywgQCRsaW5lW21hcCB7cmFuZCBAJGxpbmV9KDEuLiRzcGVjKV0pOwp9
571CiRsaW5lID0gZGVm …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.