I got hit by a fake Cloudflare popup and reverse engineered the malware it dropped. Here's what I found.

A few weeks ago I was browsing and got one of those "Verify you are human" Cloudflare popups. Except it wasn't Cloudflare — it was a ClickFix page that told me to press Win+R and paste a command. I'm on Linux so nothing executed on me, but I grabbed the file and spent time tearing it apart. Here's what's inside. The file: Tourmaline.exe (~10.8 MB)...