Suspicious 54% Download

780c18b21278006e67d4298c1564f228.rar

Archive path traversal and batch script

RAR ADS traversal smuggles a script payloadRAR ADS name repeats parent traversal
SHA-2566c296f0c211f0c111fe210f80f14d157c32956118890f58516a396b4df5e4a30
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeO(C₂)H(Db)Md₂(Pa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.