Technical Information
- '<SYSTEM32>\wscript.exe' "%TEMP%\chunksquirrel.js"
- <Current directory>\a1901000
- %TEMP%\chunksquirrel.js
- <Current directory>\c4901000
- <Current directory>\f5f6f12b.tmp
- <PATH_SAMPLE>.xls
- http://ad###skoro.com/administrator/templates/ok.exe
- DNS ASK ad###skoro.com