Technical Information
- '%TEMP%\wekipedia.exe'
- %TEMP%\wekipedia.exe
- '10#.#75.113.210':80
- 'ky######perm92139124.sbs':443
- http://10#.#75.113.210/821/knm.exe
- 'ky######perm92139124.sbs':443
- DNS ASK ky######perm92139124.sbs
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding