Technical Information
- %TEMP%\2bc1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '34.##9.100.209':443
- '%TEMP%\2bc1.tmp' --ping<Full path to file> 722010EDB5C9DA9B3C301B6EE74D022E2AA0F0A1862A66BCFC3E1C0EC1AE1E097DFF53956CC56575848F933344B79382DEC00DD54FDF1BE8563DD391DBAD0C5D
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\2bc1.tmp' --ping<Full path to file> 722010EDB5C9DA9B3C301B6EE74D022E2AA0F0A1862A66BCFC3E1C0EC1AE1E097DFF53956CC56575848F933344B79382DEC00DD54FDF1BE8563DD391DBAD0C5D' (with hidden window)