Detected #SmartApeSG infection chain

Compromised site
-->
vcdggsfw[.]top/session/route-header.php
-->
vcdggsfw[.]top/session/scope-schema.js (clickfix)
-->
urotypos[.]com/cd/temp (HTA)
-->
urotypos[.]com/ls/production (ZIP)

a6a748c0606fb9600fdf04763523b7da20b382b054b875fdd1ef1c36fc16079a production