Technical Information
- %TEMP%\hwbnea1
- %TEMP%\hwbnea2
- %TEMP%\hwbnea3
- http://ma####icimmo.com/hfvg623?Hw###########
- http://mc###esigns.com/hfvg623?Hw###########
- http://de###vise.com/hfvg623?Hw###########
- DNS ASK ma####icimmo.com
- DNS ASK mc###esigns.com
- DNS ASK de###vise.com
- DNS ASK co###goan.net
- DNS ASK sh###foldy.com