Hostile 100% go Download

github.com/Kaleidora/dnsub-scanning-tool v0.0.0-20260817130931-cf88d287aca5

Downloads and executes hidden PowerShell payload

Certutil DecodeExtreme inline whitespace padding in Go source
SHA-256bc7223a3d08becc853eafccc8c5991523a31202b982bbdb9a8fdfbcd718bbbd4
URLhttps://proxy.golang.org/github.com/!kaleidora/dnsub-scanning-tool/@v/v0.0.0-20260817130931-cf88d287aca5.zip
MaleculeK(Te)O(As)H₅(Cm₅Db₂FOsPo₄)Md(Bk₃)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.