Technical Information
- '' (downloaded from the Internet)
- %TEMP%\setup.exe
- %TEMP%\is-3B3QQ.tmp\setup.tmp
- %TEMP%\ndliqjhjwe.exe
- 'localhost':1039
- 'ra##ag.com':80
- http://ra##ag.com/Software/network.exe
- DNS ASK ra##ag.com
- '%TEMP%\setup.exe'
- '%TEMP%\is-3B3QQ.tmp\setup.tmp' /SL5="$40092,1696728,371200,%TEMP%\setup.exe"
- '%TEMP%\ndliqjhjwe.exe'