Technical Information
- '%APPDATA%\microsoft\windows\templates\pnisnjpu.exe'
- pnisnjpu.exe
- %APPDATA%\microsoft\windows\templates\pnisnjpu.exe
- 'tr#######esevaristomadero.com':80
- http://www.tr#######esevaristomadero.com/jbzscontent/xfzbhjbzbfubtegjhbkjdf/server1.exe
- DNS ASK tr#######esevaristomadero.com