Technical Information
- <Drive name for removable media>:\<File name>.exe
- %TEMP%\IhebPass.txt
- %TEMP%\WebBrowserPassView.exe
- %HOMEPATH%\My Documents\My Music\亊Ҙ五ほほуъҘ\api.exe
- <Full path to file>
- '93.##8.134.11':587
- DNS ASK smtp.yandex.ru
- '%TEMP%\WebBrowserPassView.exe' /stext %TEMP%\IhebPass.txt
- '%HOMEPATH%\My Documents\My Music\亊Ҙ五ほほуъҘ\api.exe' /stext 1Password.txt
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 1
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 1 > Nul & Del "<Full path to file>"