Technical Information
- %WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe
- 'in###o.online':80
- http://in###o.online/uploads/Xeqtnfbao_Owrtgvpg.png
- DNS ASK in###o.online
- '<SYSTEM32>\cmd.exe' /c timeout 38' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -enc UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgACcAQwA6AFwAJwAsACcAQwA6AFwAVQBzAGUAcgBzAFwAdQBzAGUAcgBcAEEAcABwAEQAYQB0AGEAXABSAG8AYQBtAGkAbgBnAFwATQBp...' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c timeout 38
- '<SYSTEM32>\timeout.exe' 38
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -enc UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgACcAQwA6AFwAJwAsACcAQwA6AFwAVQBzAGUAcgBzAFwAdQBzAGUAcgBcAEEAcABwAEQAYQB0AGEAXABSAG8AYQBtAGkAbgBnAFwATQBp...