Technical Information
- %TEMP%\cn0l5ery9
- %TEMP%\cn0l5ery9.dll
- 'cm#.ro':80
- http://br#####informatica.it/f5t8a
- http://pr####cialpw.com/wme3d
- http://im##.3x.ro/oirjm2
- DNS ASK br#####informatica.it
- DNS ASK pr####cialpw.com
- DNS ASK im##.3x.ro
- DNS ASK wa###ewang.name
- DNS ASK cm#.ro
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\CN0L5E~1.DLL,qwerty 323