Technical Information
- %TEMP%\vwj..bat
- nul
- DNS ASK mo####rtsworld.com
- DNS ASK fi####ationarts.com
- DNS ASK sp#####shingarts.com
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Vwj..bat" > nul 2> nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Vwj..bat" > nul 2> nul