Suspicious 80% Download

01102026_0643_30092026_Agreement_Document.bat.zip

Obfuscated PowerShell payload execution

Numeric character array payloadPowerShell executable name reference
SHA-256c69c043708efacf1c31408c11c2b1caa256544a88485609c3e784bcc848df27e
URLhttps://tria.ge/api/v0/samples/261001-hgyv8a1v6r/sample
MaleculeO(As₃)H(Po₂)Md₃(BiPa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.