Technical Information
- %WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe
- %APPDATA%\bebra.exe
- '65.##.213.208':3000
- http://65.##.213.208:3000/ via 65.##.213.208
- '%WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe'
- '%WINDIR%\syswow64\cmd.exe' /c %APPDATA%\bebra.exe