Technical Information
- %TEMP%\xaaz0pksws8hah
- %TEMP%\xaaz0pksws8hah.dll
- http://fo###iz-net.com/wf7x3lc
- http://im##.3x.ro/oirjm2
- DNS ASK wa###ewang.name
- DNS ASK fo###iz-net.com
- DNS ASK or#d.it
- DNS ASK im##.3x.ro
- DNS ASK tr###xsb.com
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\XAAZ0P~1.DLL,qwerty 323