Technical Information
- feelefficiency.exe
- %TEMP%\ixp000.tmp\feelefficiency.exe
- %TEMP%\ixp000.tmp\feelefficiency.exe
- '17#.#08.87.180':80
- 'la#####iar.duckdns.org':4047
- 'ge###ugin.net':80
- http://17#.#08.87.180/poster/Eeimggrlfa.pdf
- http://ge###ugin.net/json.gp
- 'la#####iar.duckdns.org':4047
- DNS ASK la#####iar.duckdns.org
- DNS ASK ge###ugin.net
- '%TEMP%\ixp000.tmp\feelefficiency.exe'
- '%TEMP%\ixp000.tmp\feelefficiency.exe' ' (with hidden window)