Technical Information
- %TEMP%\tmp.exe
- %TEMP%\tmp.exe (downloaded from the Internet)
- %TEMP%\tmp.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\N[1].exe
- 'rg##st.net':80
- 'localhost':1036
- rg##st.net/download/38561891/a53670cad6f3a4dc18b4664a9448b5e6617c3b8c/N.exe
- DNS ASK rg##st.net