Technical Information
- %TEMP%\zsbxbeqwzgmk
- %TEMP%\zsbxbeqwzgmk.dll
- http://am######armand.perso.sfr.fr/vdq5lp
- http://www.me##.metro.ru/uumr65
- DNS ASK al##.dommel.be
- DNS ASK am######armand.perso.sfr.fr
- DNS ASK me##.metro.ru
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\ZSBXBE~1.DLL,qwerty 323