Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Looks up Uninstall key entries in the registry to enumerate software on the system.

Checks whether UAC is enabled

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Network Share Discovery

Attempt to gather information on host network.

Uses WMI to collect hardware manufacturer information

Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.