Suspicious 91% agent Download

sapdev-ai/sap-dev 2283c60151fab9e4dbbb9c92d931ffabd2cda9f8

obfuscated VBS, DPAPI, hidden execution

WScript shell runs cmd or PowerShell hiddenWScript.Shell Exec launches command
SHA-256cfd8d1b5dd74259ca08f4703685cd5a4a0479901e877ec9578e67b8e9916c220
URLhttps://github.com/sapdev-ai/sap-dev/archive/2283c60151fab9e4dbbb9c92d931ffabd2cda9f8.tar.gz
MaleculeK(Am)O₁₀(C₁₂Xe₇As₁₂Er₇Al₂CaCo₂Dy₂I₇Pr)H₁₁(F₃₁Cm₁₅CrDb₄₁DsHf₂MgOs₁₂Po₃₂Ti₂U₅)Md₇(BiBk₃In₅Pa₈Pd₂Pt₂)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.