Technical Information
- %TEMP%\lcas.exe
- %TEMP%\pesly.exe
- http://ap####lutions.com/test/Targ-0104USr.bis
- http://cf##c.com/downloads/Targ-0104USr.bis
- http://www.cf##c.com/downloads/Targ-0104USr.bis
- DNS ASK ap####lutions.com
- DNS ASK cf##c.com
- '%TEMP%\lcas.exe'
- '%TEMP%\lcas.exe' ' (with hidden window)