Technical Information
- <Current directory>\b6.exe
- %TEMP%\21541.bat
- <Current directory>\b6.exe
- 'cr############allback.s3-us-west-2.amazonaws.com':80
- http://cr############allback.s3-us-west-2.amazonaws.com/spd/shopp/sense9.exe_d
- http://cr############allback.s3-us-west-2.amazonaws.com/spd/shopp/sense9.exe_b
- http://cr############allback.s3-us-west-2.amazonaws.com/spd/shopp/sense9.exe_e
- http://cr############allback.s3-us-west-2.amazonaws.com/spd/shopp/sense9.exe_a
- http://cr############allback.s3-us-west-2.amazonaws.com/spd/shopp/sense9.exe_c
- DNS ASK er####.crossrider.com
- DNS ASK dl.###devzone.com
- DNS ASK cr############allback.s3-us-west-2.amazonaws.com
- '<Current directory>\b6.exe' "<Full path to file>"
- '<Current directory>\b6.exe' "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\21541.bat" "<Current directory>\b6.exe""' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\21541.bat" "<Current directory>\b6.exe""