Technical Information
- %TEMP%\agyypdzeocsgq.js
- http://kv####vaya-lampa.ru/fC9qZW
- http://me####esign.info/o12QeD
- http://mc####eyhigh.org/lhAfaC
- http://ha##mee.com/hIPTXx
- http://pg####unitycab.com/FAlx1b
- http://an####vazquez.net/1UaAWY
- http://am##sur.com/sJIEQB
- http://10###nsult.com/zZVPJj
- http://af###ityee.com/jkpziP
- http://je###mpiotr.pl/IiJlGp
- http://po###loki.ru/nbTURt
- http://po###loki.ru/404
- DNS ASK bi#####prservices.com
- DNS ASK oh###-o-d.info
- DNS ASK af###ityee.com
- DNS ASK be######bersindallas.com
- DNS ASK 10###nsult.com
- DNS ASK me##kino.ru
- DNS ASK am##sur.com
- DNS ASK pv###jekt.pl
- DNS ASK je###mpiotr.pl
- DNS ASK an####vazquez.net
- DNS ASK pg####unitycab.com
- DNS ASK re#####.motociclismo.es
- DNS ASK ha##mee.com
- DNS ASK mc####eyhigh.org
- DNS ASK me####esign.info
- DNS ASK nw###izel.ru
- DNS ASK kv####vaya-lampa.ru
- DNS ASK pa###.heutagon.com
- DNS ASK po###loki.ru
- '<SYSTEM32>\wscript.exe' %TEMP%\agyYpdZEocsgq.js