Technical Information
- %TEMP%\cjhojmplmopd.js
- 'ba####amedyczne.eu':80
- http://bi####nlibre.com/NI5QRK
- http://at###tisfood.pl/KFXDB9
- http://b2####daction.fr/8IB6TP
- http://ba#####valandirma.com/7MQ2AT
- http://ar####lescope.ru/hZgYLO
- http://be###yworld.hu/BAj60H
- DNS ASK bi####nlibre.com
- DNS ASK ar#######ubmissionwebsites.com
- DNS ASK at###tisfood.pl
- DNS ASK as###urid.net
- DNS ASK ay####bimbenim.com
- DNS ASK bk##.com
- DNS ASK b2####daction.fr
- DNS ASK ba#####valandirma.com
- DNS ASK ar####lescope.ru
- DNS ASK ax###overs.com
- DNS ASK be###yworld.hu
- DNS ASK bm###adag.com
- DNS ASK ba####amedyczne.eu
- '<SYSTEM32>\wscript.exe' %TEMP%\cJHOjMplMopD.js