Technical Information
- %TEMP%\mmbrjtll2
- %TEMP%\mmbrjtll3
- http://ma####icimmo.com/hfvg623?mM###############
- http://ka##ar.pl/hfvg623?mM###############
- DNS ASK ko###-trade.com
- DNS ASK ma####icimmo.com
- DNS ASK ka##ar.pl
- DNS ASK co###goan.net
- DNS ASK sh###foldy.com