Technical Information
- %TEMP%\utqvii.js
- http://no##sys.com/EwX0sO
- http://pv###jekt.pl/oLlqvX
- http://mc####eyhigh.org/lhAfaC
- http://ki##off.ru/WNwvki
- http://kw##b.it/tNTjZ2
- http://po###loki.ru/nbTURt
- http://po###loki.ru/404
- DNS ASK no##sys.com
- DNS ASK pv###jekt.pl
- DNS ASK bi#####prservices.com
- DNS ASK mc####eyhigh.org
- DNS ASK ki##off.ru
- DNS ASK kw##b.it
- DNS ASK je###mpiotr.pl
- DNS ASK po###loki.ru
- '<SYSTEM32>\wscript.exe' %TEMP%\utqVIi.js