Hostile 100% Download

bytedvod 99.9.9

Malicious install hook exfiltrates data

URL combines external IP and .phpPyPI setup.py downloads and executes C2 payload
SHA-25677e6801b52446f07032a90fd038fce2fdb8ed4ebddae11f01d859e05401dfe54
MaleculeO₂(CS₃)H₄(Cm₉DbOsPo₂)Md₂(Pa₃Bk₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.