Hostile 100% go Download

github.com/Kaleidora/dnsub-scanning-tool v0.0.0-20260903003230-b9d8a53e287b

Downloads and executes hidden PowerShell payload

Certutil DecodeExtreme inline whitespace padding in Go source
SHA-2563f891016c81fcd5d4af5855085483938e4d95ec555d0f7e3585884ab337cfdac
URLhttps://proxy.golang.org/github.com/!kaleidora/dnsub-scanning-tool/@v/v0.0.0-20260903003230-b9d8a53e287b.zip
MaleculeK(Te)O(As)H₅(Cm₅Db₂FOsPo₄)Md(Bk₃)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.