PowerShell toolkit APT35 exploits Log4j vulnerability to distribute new ...

actions. This module attempts to execute a command. It uses the PowerShell Invoke-Expression method for the PowerShell-based module, while its C# implementation has both cmd and PowerShell options. During the analysis, we observed how the next command execution modules are created and sent by the threat actor: ................
................