ALIEN LAB DISPOSABLE FOR SALE SECRETS

Fileless persistence: The rootkit is saved as obfuscated information during the registry which is spawned with PowerShell by using Job Scheduler to become injected in to the winlogon.exe method.Making a scheduled task to execute the malware applying PowerShell. PowerShell will decompress and decrypt the final payload (Services) that could be inject