Technical Information
- %TEMP%\viewpdf_updater.exe
- %TEMP%\wmp018.exe
- http://we##erks.in/wp-content/uploads/2014/03/1103UKp.din
- http://www.we##erks.in/wp-content/uploads/2014/03/1103UKp.din
- http://mu###ich.com/wp-content/uploads/2013/08/testa.din
- http://cl####andeyedr.com/images/services/testa.din
- DNS ASK cl####andeyedr.com
- DNS ASK no######steyesurgery.net
- DNS ASK mu###ich.com
- DNS ASK de##ix.in
- DNS ASK go####gshopping.com
- DNS ASK we##erks.in
- '%TEMP%\viewpdf_updater.exe'
- '%TEMP%\viewpdf_updater.exe' ' (with hidden window)