Technical Information
- <Current directory>\w0oyucq0u3.exe
- from <Full path to file> to %TEMP%\w0oyucq0u3\....\w0oyucq0u3
- 'te##.##sthotel360.com':80
- http://te##.##sthotel360.com/001/puppet.Txt?11#####
- http://te##.##sthotel360.com/Data/jvffscaqynfl5nvyqfflqqa3naqsiocsii3i3yjcj33sf3ivjsniisesyainqv3n5jqa7ni3ajqcefvi3vjqcs57qe5eaqocan5soiec7qvsc332303231C4EA39D4C233C8D536CAB13332B7D633C3EB.txt?...
- DNS ASK te##.##sthotel360.com
- '%WINDIR%\syswow64\ipconfig.exe' /flushdns