Technical Information
- %TEMP%\dxz..bat
- DNS ASK ar####llerysite.com
- DNS ASK ro#####university.com
- DNS ASK co####rtglass.com
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Dxz..bat" > nul 2> nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Dxz..bat" > nul 2> nul