Loads dropped DLL

Accesses Microsoft Outlook profiles

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Looks up external IP address via web service

Uses a legitimate IP lookup service to find the infected system's external IP.