PoshC2: Dropper-cs.exeNovember 23, 2025Malware Analysis Reverse Engineering Windows PE .NET PoshC2 DnspyC2 .NET implant. AES-encrypted config, HTTPS beacon to 192.168.248.128, fileless in-memory execution, anti-debug via divide-by-zero.