Technical Information
- %TEMP%\tmp3.tmp
- %TEMP%\tmp3.tmp
- %TEMP%\tmp3.tmp
- from <Full path to file> to <PATH_SAMPLE>txt.exe
- 'di###onary.com':80
- http://www.di###onary.com/image?id#############################################
- DNS ASK di###onary.com
- '<PATH_SAMPLE>txt.exe' ' (with hidden window)