Technical Information
- %TEMP%\wwllmrlljqeou.js
- %TEMP%\qhutflw_22601.exe
- %TEMP%\qhutflw_52487.exe
- http://ko###rkum.org/Lntxhy
- http://kt###akis.com/UHqig6
- http://kt###akis.com/?la#####
- http://ri####ncoperu.org/B3AlqT
- http://mc####eyhigh.org/lhAfaC
- http://je###mpiotr.pl/IiJlGp
- http://pg####unitycab.com/FAlx1b
- http://c-##r.at/QSa8sI
- http://ki##off.ru/WNwvki
- http://me####esign.info/o12QeD
- http://kw##b.it/tNTjZ2
- DNS ASK ko###rkum.org
- DNS ASK af###ityee.com
- DNS ASK me####esign.info
- DNS ASK as####station.com
- DNS ASK ki##off.ru
- DNS ASK c-##r.at
- DNS ASK pg####unitycab.com
- DNS ASK nw###izel.ru
- DNS ASK la###umano.cl
- DNS ASK je###mpiotr.pl
- DNS ASK mc####eyhigh.org
- DNS ASK ro##mind.pl
- DNS ASK ri####ncoperu.org
- DNS ASK ar####qayler.com
- DNS ASK kt###akis.com
- DNS ASK me##kino.ru
- DNS ASK be##v24.ru
- DNS ASK kw##b.it
- '<SYSTEM32>\wscript.exe' %TEMP%\wWLLmRLLjQEOU.js