Technical Information
- %TEMP%\1pdjrq7zolmuu89j
- http://ra####msgroup.com/yc2bn4zba
- http://ra####msgroup.com/cgi-sys/suspendedpage.cgi
- http://oy##bee.com/yygcieumw8
- http://re##jel.hu/ya83t3xq
- DNS ASK ra####msgroup.com
- DNS ASK oy##bee.com
- DNS ASK pa###ikiti.com
- DNS ASK re##jel.hu
- DNS ASK od###icka.info