Suspicious 80% Download

KLAS-CGE 2025 Application Forms.zip.iso

LNK executes cmd.exe, obfuscated Go binary

LNK named *.pdf.lnkLNK arguments execute command with /c
SHA-256b74cab9d6eac63c8aa8bc5b022405ca71c24ad0386014c2e7d4a7d9fa82d0d71

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.