Hostile 92% Download

virussign.com_09125d5da729d557a4a06c3eab6e3700.vir

XOR-obfuscated WSH hidden PowerShell loader

Numeric XOR obfuscation feeds WSH environment stagingObfuscated WSH environment-staged hidden loader
SHA-256f402cb9d0aad41b7829ba4e793a7b9455dcb8eb8c25a84d35797e2f09a1bc7cb
URLhttp://samples.virussign.com/samples/virussign.com_20260820_LimitedFree.zip
MaleculeO₃(As₃CXe₂)H₄(Po₂Db₄FOs₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.