sha256
d8e3973a0b3c5359d1f53a22491b56bdd31dee13a51c01c7126bc6694584512f
discovered 2026-05-20
Original Coruna exploit kit payload served from v3.jiathis.com/code/jia.js (Phase 2, no longer served)
Original Coruna exploit kit payload served from v3.jiathis.com/code/jia.js (Phase 2, no longer served)
