We create and update the correlation rules and danger indicators required to repeatedly detect and stop attacks.Making a scheduled activity to execute the malware working with PowerShell. PowerShell will decompress and decrypt the final payload (Assistance) that may be injected into the winlogon.exe system and executed via dllhost.exe applying appr