Technical Information
- %TEMP%\whiosjis.js
- %TEMP%\67972.4179220121.exe
- 'ma#####.dolphin247.com':80
- http://do###ind.com/hm7wQ5
- http://gg##ngs.com/tYzA6X
- http://ko###gmem.net/bTt1eI
- http://af######nylflooring.co.uk/atXTgL
- http://sw####fashion.com/StGjaJ
- http://gi###dream.com/5GJcXK
- http://gl###xx24.com/flYi3s
- http://bi####dalshop.com/RzYisV
- http://su####ime.com.au/ZcDiRz
- DNS ASK 1n###print.com
- DNS ASK su####ime.com.au
- DNS ASK bi####dalshop.com
- DNS ASK gl###xx24.com
- DNS ASK la####everyone.com
- DNS ASK la##ven.com
- DNS ASK gi###dream.com
- DNS ASK ay#####hediyelik.com
- DNS ASK sw####fashion.com
- DNS ASK en###lass.com
- DNS ASK ko###gmem.net
- DNS ASK gg##ngs.com
- DNS ASK do###ind.com
- DNS ASK ca###i.com.au
- DNS ASK ma##ey.com
- DNS ASK af######nylflooring.co.uk
- DNS ASK ma#####.dolphin247.com
- '<SYSTEM32>\wscript.exe' %TEMP%\wHIOsjis.js