Technical Information
- %TEMP%\agyypdzeocsgq.js
- %TEMP%\bysbuvv_18544.exe
- http://pg####unitycab.com/FAlx1b
- http://le######erryconsulting.com/gXTND7
- http://ma#####iproperties.com/pQIJGB
- http://po###loki.ru/nbTURt
- http://po###loki.ru/404
- DNS ASK pg####unitycab.com
- DNS ASK ar####qayler.com
- DNS ASK le######erryconsulting.com
- DNS ASK ma#####iproperties.com
- DNS ASK po###loki.ru
- '<SYSTEM32>\wscript.exe' %TEMP%\agyYpdZEocsgq.js