Technical Information
- '%TEMP%\pro.exe'
- '%TEMP%\pro.exe' (downloaded from the Internet)
- %TEMP%\pro.exe
- 's1.###ectxex.com':80
- 'wp#d':80
- s1.###ectxex.com/uploads/jRKzTSXRIhj9XDXySE1nmJ6aH0eFaF4zLTYq1lpmUYaDiBG5CSTP1O3XwjIEcYkEE8XSGhJRKP2GbZnC7iRYv0SNM2ZwRojiMaPJ
- wp#d/wpad.dat
- DNS ASK s1.###ectxex.com
- DNS ASK wp#d