Technical Information
- %TEMP%\hummy.exe
- 'bu####cklinks.com':443
- 'x1.#.lencr.org':80
- 'gr####sorepco.com':443
- http://x1.#.lencr.org/
- 'bu####cklinks.com':443
- 'gr####sorepco.com':443
- DNS ASK bu####cklinks.com
- DNS ASK x1.#.lencr.org
- DNS ASK gr####sorepco.com
- '%TEMP%\hummy.exe'
- '%TEMP%\hummy.exe' ' (with hidden window)