Technical Information
- '<SYSTEM32>\cmd.exe' /c mshta https://www.yo##ube.com/watch?v=###########
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- DNS ASK yo##ube.com
- DNS ASK oc##.thawte.com
- '<SYSTEM32>\cmd.exe' /c mshta https://www.yo##ube.com/watch?v=###########' (with hidden window)
- '<SYSTEM32>\mshta.exe' https://www.yo##ube.com/watch?v=###########