sha256

9f93d77d32833a515bc406c46da477142bb1ac2babeecb6aa42f98669a6db015

discovered 2026-06-24

Decrypted worm payload (_p blob), identical across all 20 LeoPlatform infected packages (781,580 bytes)

Campaigns