Technical Information
- %TEMP%\memqhdipo1
- %TEMP%\memqhdipo2
- %TEMP%\memqhdipo3
- http://lk##.or.id/487ygfh?mE#################
- http://jn##zs.com/487ygfh?mE#################
- http://in######consultants.com.my/487ygfh?mE#################
- DNS ASK lk##.or.id
- DNS ASK jn##zs.com
- DNS ASK in######consultants.com.my
- DNS ASK ca###trove.net
- DNS ASK re###orn.net