Technical Information
- %TEMP%\w2l2lppxji
- http://ra####msgroup.com/yc2bn4zba
- http://ra####msgroup.com/cgi-sys/suspendedpage.cgi
- http://ps###aching.fr/wtadfi
- http://re##jel.hu/ya83t3xq
- DNS ASK od###icka.info
- DNS ASK ra####msgroup.com
- DNS ASK ps###aching.fr
- DNS ASK re##jel.hu
- DNS ASK th###anhpc.com