Technical Information
- %TEMP%\tlnsjih49wj
- 'de###kwegtuk.nl':80
- 'be##end.dk':80
- 'sr#####shnatemple.com':80
- 'sa###sraw.com':80
- 'ru##chat.ru':80
- http://www.de###kwegtuk.nl/ub4btafy96
- http://be##end.dk/rxal56tkc
- http://sr#####shnatemple.com/agmzvm
- http://sa###sraw.com/9htfn95i
- http://ru##chat.ru/a3qls
- DNS ASK de###kwegtuk.nl
- DNS ASK be##end.dk
- DNS ASK sr#####shnatemple.com
- DNS ASK sa###sraw.com
- DNS ASK ru##chat.ru