Hostile 100% Download

photov_939862795057.zip

LNK executes obfuscated PowerShell

LNK decodes a remote script loaderLNK converts BigInt into base-256 bytes
SHA-256b49c56f3e4d37b9904593bd8e45a10ddc07b8122c2f789bed2b980b39128162d

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.