sha256
11fe3a47333f63fd0e0a32ea16351eb302659aba983c07e4ea3dc9b09b618509
discovered 2026-06-23
Second-stage Rust infostealer Windows binary (win.js) downloaded from github.com/angelmaybeth21-oss/test/releases/download/v1.0.0/win.js. Windows variant exfils via Telegram Bot API and is NOT anti-VM gated. Attributed to Amazon Inspector dynamic analysis.
