Technical Information
- <Current directory>\½óâë¿Г»§¶ë1587732379.exe
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- http://www.ji##a2.com/up.txt
- http://www.ji##a2.com/up.exe
- DNS ASK ji##a2.com
- '<Current directory>\½óâë¿Г»§¶ë1587732379.exe'
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\tem.vbs"