Technical Information
- %TEMP%\a.doc
- 'so####ailing.com':80
- 'jd##ve.com':80
- 'mv###ding.net':80
- 'fi####sdigezt.com':80
- http://so####ailing.com/counter/?Tf#############################################################################
- http://jd##ve.com/counter/?1
- http://mv###ding.net/counter/?1
- http://jd##ve.com/counter/?2
- http://mv###ding.net/counter/?2
- DNS ASK so####ailing.com
- DNS ASK jd##ve.com
- DNS ASK ro####ndergarten.ro
- DNS ASK re#######s.springcreekranch.org
- DNS ASK mv###ding.net
- DNS ASK fi####sdigezt.com
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\a.doc"