Technical Information
Network activity
Connects to
- 'ln#z.at':80
- 'ln#z.at':443
- 'pk#.goog':80
- '19#.#.216.151':80
TCP
HTTP GET requests
- http://ln#z.at/ksFJ7
- http://pk#.goog/gsr1/gsr1.crt
- http://19#.#.216.151/xlamlikeiamverymuchwithentirethingslovertokissthegreatlogswhichcomingotmewithenitrelove__okmyconmennytokiss.doc
Other
- 'ln#z.at':443
UDP
- DNS ASK ln#z.at
- DNS ASK pk#.goog
Miscellaneous
Executes the following
- '%ProgramFiles%\microsoft office\office14\winword.exe' -Embedding
