Technical Information
- %TEMP%\hhlmydj.exe
- %TEMP%\czfbkns.exe
- http://ip##fo.io/
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ma#######30-52612.portmap.host
- DNS ASK ip##fo.io
- DNS ASK microsoft.com
- '%TEMP%\hhlmydj.exe'
- '%TEMP%\czfbkns.exe'