Technical Information
- 17617.exe
- %TEMP%\17617.exe
- %TEMP%\57522739
- %TEMP%\snhfzozprcdc-20191028-1742.log
- %TEMP%\nst26e4.tmp\system.dll
- http://ha####izpromo.com/upload/crypt2/installer3_id13.exe
- DNS ASK ha####izpromo.com
- DNS ASK ha####itesworld.xyz
- '%TEMP%\17617.exe'
- '%TEMP%\17617.exe' ' (with hidden window)