Technical Information
- %APPDATA%\Mein Stealer.exe
- <SYSTEM32>\cmd.exe /c ""%APPDATA%\Install.cmd" "
- ICQ.exe
- %APPDATA%\CRNJEUFU - 887.txt
- %APPDATA%\Install.cmd
- %APPDATA%\Mein Stealer.exe
- 'ts#####o.pytalhost.at':21
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK ts#####o.pytalhost.at
- DNS ASK wp#d