Suspicious 66% Download

03102026_0219_02102026_Счет на оплату (с печатью) № 540000015840 от 07.09.202687.r11

Obfuscated PowerShell payload execution

Numeric character array payloadPowerShell executable name reference
SHA-25626fefa1db9effc8d873ce72f9cef6d18d7b248f03d1e8d0138db6de182374e73
URLhttps://tria.ge/api/v0/samples/261003-cr5tmaxhlf/sample
MaleculeO(As₃)H(Po₂)Md₂(Bi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.