Technical Information
- <Current directory>\1vom42u2safxw.exe
- from <Current directory>\1vom42u2safxw.exe to <Current directory>\9e8jubpjodmmcms.exe
- from <Full path to file> to <Current directory>\qfbwlvthkewyx9k8p.exe
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- DNS ASK br###ats.org
- DNS ASK oc##.thawte.com
- '<Current directory>\1vom42u2safxw.exe' QFbWLvthKewyx9K8P.exe