This infection contains many stages and largely depends on the C2 server, which stores the required files for each stage. The attacker also uses a password-protected .xls file to lower the detection rate.
Dedicated Forum to help removing adware, malware, spyware, ransomware, trojans, viruses and more!
