Technical Information
- http://gg###osrep.ga/~zadmin/btb/login.php as %appdata%\order-listt
- %PROGRAMDATA%\hrjytrj.cmd
- %APPDATA%\order-listt
- http://gg###osrep.ga/~zadmin/btb/login.php
- DNS ASK gg###osrep.ga
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shell32.dll,OpenAs_RunDLL %APPDATA%\ORDER-LISTT