Technical Information
- %WINDIR%\syswow64\lpwpuw.bat
- nul
- http://www.xz###vc.net.cn/news/image.jpg
- http://19#.#10.187.44/nba/image.jpg
- http://www.xz###vc.net.cn/sports/image.jpg
- http://19#.#10.187.44/files/image.jpg
- DNS ASK xz###vc.net.cn
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\lpwpuw.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\lpwpuw.bat
- '%WINDIR%\syswow64\ping.exe' -n 3 127.0.0.1