Hostile 93% go Download

github.com/xalgord/xalgorix/v4 v4.6.28-0.20260902212458-6b3d4d12b9b7

cookie exfil, credential harvesting, autonomous agent

Certutil DecodeDetects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228
SHA-2563fcd8a3bdbfa0bffd6a78bafe50b5a64c4311b62c20b2cb6b3875259f7a714f8
URLhttps://proxy.golang.org/github.com/xalgord/xalgorix/v4/@v/v4.6.28-0.20260902212458-6b3d4d12b9b7.zip
MaleculeK₃(Am₃Li₅Te₆)O₁₀(AsCCa₄DyErEu₂IP₂S₂Xe)H₁₀(Br₂Cm₉₁Cr₆Db₃₄F₂₉Hf₃Os₂₂Po₂₅Ti₃U₁₁)Md₅(Bk₃InPa₆)Th₂

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.