Hostile 92% javascript Download

pongplot 1.0.0

obfuscated dropper, hidden spawn, C2

“Realtime Network Route & Latency Monitor Web Dashboard”

Obfuscated Node stage uses computed HTTPS and hidden detached spawnObfuscated code hides child_process and spawns
SHA-2564b02fb435f4adfe3a01df862b4af4ebc72aff05017cec4758db5c6e62b13a210
URLhttps://registry.npmjs.org/pongplot/-/pongplot-1.0.0.tgz
MaleculeK₂(AmLi)O₃(C₃As₃Xe)H₈(Cm₁₅CrDb₁₉HfOs₆Po₇Ti₂U₅)Md₅(Pa₆Bi₂Bk)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.