Technical Information
- %TEMP%\uopqqolm\<File name>.exe
- %TEMP%\uopqqolm\<File name>.exe
- http://92##b.com/6.1bip.txt
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://www.ch###pyg.com/
- DNS ASK 92##b.com
- DNS ASK bb#.125.la
- DNS ASK microsoft.com
- DNS ASK ba##u.com
- DNS ASK ch###pyg.com
- DNS ASK do##an.com