Technical Information
- %TEMP%\zkybcjyits.js
- %TEMP%\75429.4513632188.exe
- %TEMP%\78462.52522337841.exe
- %TEMP%\13527.743899724471.exe
- http://ca##oxy.com/7YnKvu
- http://or####tags.co.uk/BRgn0x
- http://im##ice.com/4HCbnY
- http://mr####online.com/qbQStU
- http://ld###tist.com/xPbm4J
- http://af######nylflooring.co.uk/atXTgL
- http://no####rothers.com/tbjMPd
- http://fa###xwigs.com/AYLsw1
- http://ar####nwankwo.com/J5wTv8
- http://co###nte.com.sg/QAN1G8
- http://ib####rect.co.uk/p4HAay
- http://hk##sh.com/F4Q1l6
- DNS ASK ca##oxy.com
- DNS ASK po###chi.com
- DNS ASK pr####typrobe.com
- DNS ASK co###nte.com.sg
- DNS ASK j2####ing.com.sg
- DNS ASK ar####nwankwo.com
- DNS ASK fa###xwigs.com
- DNS ASK no####rothers.com
- DNS ASK ll####sstore.com
- DNS ASK af######nylflooring.co.uk
- DNS ASK el####ing-wedge.com
- DNS ASK ld###tist.com
- DNS ASK sh####ackers.com
- DNS ASK in####t-logic.com
- DNS ASK at###ross.com
- DNS ASK mr####online.com
- DNS ASK im##ice.com
- DNS ASK or####tags.co.uk
- DNS ASK ib####rect.co.uk
- DNS ASK hk##sh.com
- '<SYSTEM32>\wscript.exe' %TEMP%\zKyBCJyits.js