Hostile 93% go Download

github.com/Kaleidora/dnsub-scanning-tool v0.0.0-20260804185822-befe17075ad3

PowerShell dropper in main.go

Go PowerShell downloader decodes and runs a scriptdnsub source embeds a hidden decoded PowerShell loader
SHA-256e6369c57960fa5c3c263f15344da94bdf6a912237843307955db57ee94ced0e8
URLhttps://proxy.golang.org/github.com/!kaleidora/dnsub-scanning-tool/@v/v0.0.0-20260804185822-befe17075ad3.zip
MaleculeK(Te)O₅(CErSAsI)H₆(Cm₆Db₂FOsPo₇Ti)Md₃(Bk₄Pa)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.