Technical Information
- %TEMP%\LDR2.tmp.exe
- %TEMP%\LDR1.tmp.exe
- %TEMP%\LDR2.tmp.exe (downloaded from the Internet)
- %TEMP%\LDR1.tmp.exe (downloaded from the Internet)
- %TEMP%\LDR2.tmp.exe
- %TEMP%\LDR1.tmp.exe
- %TEMP%\LDR2.tmp.exe
- %TEMP%\LDR1.tmp.exe
- '<Private IP address>':80
- <Private IP address>/notepad.exe
- <Private IP address>/calc.exe