Technical Information
- %TEMP%\asgbgvl.js
- http://ha##mee.com/hIPTXx
- http://qu#####anieriviste.com/WIKuLk
- http://ro###arita.com/5NmH3b
- http://po###loki.ru/nbTURt
- http://po###loki.ru/404
- DNS ASK pv###jekt.pl
- DNS ASK ha##mee.com
- DNS ASK qu#####anieriviste.com
- DNS ASK ro###arita.com
- DNS ASK po###loki.ru
- '<SYSTEM32>\wscript.exe' %TEMP%\aSGBgvl.js