Technical Information
- %TEMP%\hh1geyclvnuk8t
- 'se##bel.com':80
- 'qu###cross.com':80
- 'pr##gai.com':80
- 'pr##edu.com':80
- 'sa##oil.ro':80
- http://se##bel.com/y5gib1m
- http://qu###cross.com/1bs25ip6hl
- http://pr##gai.com/zocuh0ppx
- http://pr##edu.com/tnbsb
- http://sa##oil.ro/zcw2fdqf
- DNS ASK se##bel.com
- DNS ASK qu###cross.com
- DNS ASK pr##gai.com
- DNS ASK pr##edu.com
- DNS ASK sa##oil.ro