Technical Information
- %TEMP%\20230916t014232_561.exe
- '20##########232_561.ltiapmyzmjxrvrts.info':80
- '20##########358_902.ltiapmyzmjxrvrts.info':80
- http://20##########232_561.ltiapmyzmjxrvrts.info/v4/20230916T014232_561.exe
- http://20##########358_902.ltiapmyzmjxrvrts.info/v4/20230916T014358_902.exe
- DNS ASK 20##########232_561.ltiapmyzmjxrvrts.info
- DNS ASK 20##########358_902.ltiapmyzmjxrvrts.info
- '%TEMP%\20230916t014232_561.exe'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\20230916T014232_561.exe
- '<SYSTEM32>\cmd.exe' /c %TEMP%\20230916T014358_902.exe
- '<SYSTEM32>\cmd.exe' /c %TEMP%\20230916T014515_902.exe