Technical Information
- '%WINDIR%\explorer.exe' /c, %TEMP%\rj26666.js
- %TEMP%\rj26666.js
- 'e3########upl.super03xtp038vnb.ga':443
- DNS ASK e3########upl.super03xtp038vnb.ga
- '<SYSTEM32>\wscript.exe' "%TEMP%\rj26666.js"
- '<SYSTEM32>\wscript.exe' "%TEMP%\rj26666.js"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /S /D /c" sET/p iibmmzz="%ZKK:GJJR=%%tt99880:XTY=/%" 0<nul 1>%TEMP%\rj26666.js 2>&1"
- '<SYSTEM32>\cmd.exe' /S /D /c" CAll %JOO:NCCA=% %TEMP%\rj26666.js 2>&1"
- '<SYSTEM32>\cmd.exe' /S /D /c" exiT"