Technical Information
- %APPDATA%\<File name>.exe
- %TEMP%\report_28-07-2018_23-01-04-KIAB.bin
- %TEMP%\NO_PWDS_report_28-07-2018_23-01-04-KIAB.bin
- %APPDATA%\ufr_files\NO_PWDS_report_28-07-2018_23-01-04-KIAB.bin
- %TEMP%\name-scripter.rar
- %APPDATA%\<File name>.exe
- %TEMP%\NO_PWDS_report_28-07-2018_23-01-04-KIAB.bin
- from %TEMP%\report_28-07-2018_23-01-04-KIAB.bin to %TEMP%\NO_PWDS_report_28-07-2018_23-01-04-KIAB.bin
- '94.##0.191.201':25
- DNS ASK sm##.mail.ru
- '%APPDATA%\<File name>.exe'