Suspicious 80% dotnet Download

Vimes.SignSDK.Merchants.CMC.Domain 1.0.21

Staged loader comment in archive

Access to ASP.NET Response objectQuery current username via .NET
SHA-256a410c06accfcf1b573c017a4c6b47fdae84446086b60db520d9319bb9d2d302f
URLhttps://api.nuget.org/v3-flatcontainer/vimes.signsdk.merchants.cmc.domain/1.0.21/vimes.signsdk.merchants.cmc.domain.1.0.21.nupkg
MaleculeO(C)H₂(CmPo)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.