Hostile 92% go Download

github.com/the1812/malware-patch v2.9.5+incompatible

Disables Task Manager, registry persistence

Unsigned .NET AppDomain stub with version mismatchVB6 Run-key dropper stages an exe payload
SHA-256dad7a90e68ad25361ba0fb1e65a36e92bd71f586dc1313814337ec20f87a7cc4
URLhttps://proxy.golang.org/github.com/the1812/malware-patch/@v/v2.9.5+incompatible.zip
MaleculeK(Li)O₆(As₇C₅Er₅I₂P₃Xe)H₉(Cm₁₃Cr₂Db₇F₉HfOs₇Po₉Ti₂U₂)Md₇(Bi₈Bk₂In₂₇Pa₃Pt₃Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.