Technical Information
- '' (downloaded from the Internet)
- <Current directory>\YB9eA0.exe
- 'bi#####arhearing.top':80
- http://bi#####arhearing.top/swTQA1WOQlFQEhEPExWUllAGJkTVkgRZdFWeJEEDRUVH5FQRRkHV4RBysiSOtFXSVRGfYwFJAxH5cBFUkiMWREQHsABak1RyQgBLQkOJB0QD1FRJYgXfZkQaVBCBlwTdNQQDp1QOYBUP1VUCdxTT81QH5TGW8lLakhDap...
- DNS ASK bi#####arhearing.top
- '<Current directory>\YB9eA0.exe'