Benign Download

b491fc5049d55656e65153a22f68d44d5420f96f66fef2aa1d386db68a1b55ef

Assembly LOOP target mnemonicGo ioutil.ReadFile

SHA-256b491fc5049d55656e65153a22f68d44d5420f96f66fef2aa1d386db68a1b55ef

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(LiMc)O₄(AsCaErI)H₈(Cm₁₇Cr₈Db₄F₃HfOs₅Po₂U)Md₃(Bi₂Pt)

Evidence

Direct syscall dispatch via mov-immediate 0x36eef–0x36faf

⋯3 more rows
0x36f1f04ceffc239d177d68d14398753240108....9.w...9.S$..
0x36f2fb8010000004883c4105dc3488d059f21.....H...].H...!
0x36f3f9f00bb22000000e8b50f050090488944...".........H.D
⋯7 more rows

ChaCha quarter-round rotation schedule 0x202f06–0x202fc6

⋯3 more rows
0x202f3648899c24080100008d9a6e64203331cbH..$......nd 31.
0x202f46c1c310418d4c1d00894c247c31d1c1c1...A.L...L$|1...
0x202f560c448d2c0a458dad6e6420334431ebc1.D.,.E..nd 3D1..
⋯7 more rows

Cookie Domain attribute 0x2e03dc–0x2e049c

⋯3 more rows
0x2e040c0000004989da488b9c249800000049bc...I..H..$....I.
0x2e041c3b20446f6d61696e4c892418c6441808; DomainL.$..D..
0x2e042c3d4c899424f800000048898c24000100=L..$....H..$...
⋯7 more rows

Cookie HttpOnly attribute 0x2e0b27–0x2e0be7

⋯3 more rows
0x2e0b570000004989d8488b9c249800000049ba...I..H..$....I.
0x2e0b673b20487474704f6e4c89141866c74418; HttpOnL...f.D.
0x2e0b77086c794c898424f800000048898c2400.lyL..$....H..$.
⋯7 more rows

HTTP protocol version strings 0x31931f–0x3193ef

⋯3 more rows
0x31934f83ec2848894424384883fb08754448ba..(H.D$8H...uDH.
0x31935f485454502f312e30483910742248ba48HTTP/1.0H9.t"H.H
0x31936f5454502f312e314839107526b8010000TTP/1.1H9.u&....
0x31937f004889c3b9010000004883c4285dc3b8.H.......H..(]..
⋯7 more rows