Technical Information
- %TEMP%\ixp000.tmp\suhst.exe
- %TEMP%\ixp000.tmp\palemo~1.exe
- %APPDATA%\bc\svhst.exe
- 'or####icpics.com':80
- http://www.or####icpics.com/bn/release/pl1.exe
- http://or####icpics.com/bn/release/pl1.exe
- http://or####icpics.com/
- http://www.or####icpics.com/bn/release/pl2.exe
- http://or####icpics.com/bn/release/pl2.exe
- http://www.or####icpics.com/bn/release/pl3.exe
- http://or####icpics.com/bn/release/pl3.exe
- http://www.or####icpics.com/bn/release/pl4.exe
- http://or####icpics.com/bn/release/pl4.exe
- DNS ASK or####icpics.com
- '%TEMP%\ixp000.tmp\suhst.exe'
- '%TEMP%\ixp000.tmp\palemo~1.exe'