Technical Information
- 'su####htgrace.eu':80
- http://su####htgrace.eu/tsc/?/u#####
- DNS ASK su####htgrace.eu
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath '<Full path to file>'
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Start-Sleep -Seconds 2; Remove-Item -path '<Full path to file>'