Technical Information
- %TEMP%\zvlwjubfu.js
- 'al####granito.com':80
- 'ki###en38.com':80
- http://al####granito.com/fOA8Bl.exe
- http://ki###en38.com/HYPETS.exe
- DNS ASK al####granito.com
- DNS ASK ki###en38.com
- DNS ASK hu###omains.com
- '<SYSTEM32>\wscript.exe' %TEMP%\ZVLwjubfu.js