Technical Information
- '%TEMP%\tmp.exe'
- '%TEMP%\tmp.exe' (downloaded from the Internet)
- %TEMP%\tmp.exe
- 'do######1648.mediafire.com':80
- 'localhost':1037
- do######1648.mediafire.com/9zfe7j9x4gpg/o15b15m3waacpw7/export.exe
- DNS ASK do######1648.mediafire.com