Technical Information
- '<SYSTEM32>\wscript.exe' "%TEMP%\DJelY.vbs"
- '%WINDIR%\explorer.exe' %TEMP%\DJelY.vbs
- %TEMP%\djely.vbs
- %TEMP%\lli.txt
- %TEMP%\djely.vbs
- %TEMP%\lli.txt
- '%WINDIR%\explorer.exe' %TEMP%\DJelY.vbs' (with hidden window)
- '<SYSTEM32>\wscript.exe' "%TEMP%\DJelY.vbs"' (with hidden window)