Hostile 100% Download

photov_322589669239.zip

LNK executes obfuscated PowerShell downloader

LNK decodes a remote script loaderLNK converts BigInt into base-256 bytes
SHA-2561dc8130b0b5d9516444e4a8d20dfecb47e3831222b5a3b6c1a852aeecd75e7d5
URLhttps://tria.ge/api/v0/samples/260727-pfyx6assfy/sample
MaleculeO₄(AsCXeEr)H₂(CmPo₃)MdTh

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.