Technical Information
- '%TEMP%\cosug.exe'
- '%TEMP%\scaip.exe'
- '%TEMP%\cosug.exe' (downloaded from the Internet)
- %TEMP%\cosug.exe
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\1205USmpnew[1].tar
- %TEMP%\scaip.exe
- 'bu##dit.com':80
- bu##dit.com/scripts/1205USmpnew.tar
- DNS ASK bu##dit.com