Technical Information
- %TEMP%\ekzfjzbya1
- %TEMP%\ekzfjzbya3
- http://mt###lekom.com/7845gf?ek#################
- http://mu####ecruiting.com/7845gf?ek#################
- http://te###xebec.com/7845gf?ek#################
- http://ch###sissy.net/7845gf?ek#################
- DNS ASK mt###lekom.com
- DNS ASK mo####r-high.com.ua
- DNS ASK mu####ecruiting.com
- DNS ASK te###xebec.com
- DNS ASK ch###sissy.net