Technical Information
- %TEMP%\aabc.tmp
- %TEMP%\aabc.tmp
- 'gi##mas.xyz':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'gi##mas.xyz':443
- DNS ASK gi##mas.xyz
- DNS ASK microsoft.com
- '%WINDIR%\syswow64\cmd.exe' /c "echo Commands" >> %TEMP%\AABC.tmp
- '%WINDIR%\syswow64\cmd.exe' /c "dir" >> %TEMP%\AABC.tmp