Benign Download

die.bat

Uses Windows copy commandWindows shutdown command in source
SHA-2567968391db0c70f0fc4bda75f210538e515f33ef23168cb64bbf9ccb3653f8415
URLhttps://tria.ge/api/v0/samples/260909-mv4e3sdr9y/sample
MaleculeH₂(F₂Os)

Evidence

Uses Windows copy command lines 6–10
6:49… llfailures
7:: Force a crash driver to load (known bad driver)
8copy C:\Windows\System32\ntoskrnl.exe C:\Windows\System32\badkrnl.exe
9bcdedit /set {default} driversload C:\Windows\System32\badkrnl.exe
10shutdown /r /t 0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.