Technical Information
- '45.##3.201.7':80
- 't.#e':443
- 'ma###don.social':443
- http://45.##3.201.7/windows.decoder.manager.form.madrid3_Usdmnyjj.bmp
- 't.#e':443
- 'ma###don.social':443
- DNS ASK t.#e
- DNS ASK ma###don.social
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -enc UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAAMQAwAA==' (with hidden window)
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -enc UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAAMQAwAA==