Technical Information
- %TEMP%\file123.txt
- http://68##################-79aa670eb16f0c00ab17be995dae43df.r67.cf5.rackcdn.com/26ccfc0f689b98dd399d9c5810f0d484.exe
- DNS ASK 68##################-79aa670eb16f0c00ab17be995dae43df.r67.cf5.rackcdn.com
- '<SYSTEM32>\wscript.exe' "<PATH_SAMPLE>.vbs" uac