Technical Information
- %TEMP%\lrnwkijyocj1
- http://th###xcenter.ru/yr387n3?lr#####################
- http://na##cg.com/yr387n3?lr#####################
- http://re#####utoauction.com/yr387n3?lr#####################
- DNS ASK th###xcenter.ru
- DNS ASK na##cg.com
- DNS ASK re#####utoauction.com
- DNS ASK ja###brith.net
- DNS ASK sy###ont.com