Technical Information
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 3
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 3&del /q "<Full path to file>"
- %TEMP%\~2013~.TMP
- %TEMP%\~2013~.TMP
- %TEMP%\~2013~.TMP
- 'da##.haosys.com':80
- http://da##.haosys.com/33la.txt
- DNS ASK da##.haosys.com