Hostile 100% go Download

github.com/Kaleidora/dnsub-scanning-tool v0.0.0-20260818220303-be9b2a2e17b3

Downloads and executes remote PowerShell

Certutil DecodeExtreme inline whitespace padding in Go source
SHA-256270a60e69103171b91c75fb5bddf0b81d23261b419e93314a29e42aae4077c34
URLhttps://proxy.golang.org/github.com/!kaleidora/dnsub-scanning-tool/@v/v0.0.0-20260818220303-be9b2a2e17b3.zip
MaleculeK(Te)O(As)H₅(Cm₅Db₂FOsPo₄)Md(Bk₃)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.