Technical Information
- %TEMP%\20230923t003205_896.exe
- '20##########205_896.ltiapmyzmjxrvrts.info':80
- '20##########254_433.ltiapmyzmjxrvrts.info':80
- http://20##########205_896.ltiapmyzmjxrvrts.info/v4/20230923T003205_896.exe
- http://20##########254_433.ltiapmyzmjxrvrts.info/v4/20230923T003254_433.exe
- DNS ASK 20##########205_896.ltiapmyzmjxrvrts.info
- DNS ASK 20##########254_433.ltiapmyzmjxrvrts.info
- '%TEMP%\20230923t003205_896.exe'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\20230923T003205_896.exe