Technical Information
- %TEMP%\file123.txt
- 'microsoft.com':80
- '68##################-79aa670eb16f0c00ab17be995dae43df.r67.cf5.rackcdn.com':80
- DNS ASK microsoft.com
- DNS ASK 68##################-79aa670eb16f0c00ab17be995dae43df.r67.cf5.rackcdn.com
- '<SYSTEM32>\wscript.exe' "<PATH_SAMPLE>.vbs" uac