Technical Information
- '%WINDIR%\Temp\_ex-08.exe'
- '%WINDIR%\Temp\_ex-68.exe'
- '%WINDIR%\Temp\_ex-08.exe' (downloaded from the Internet)
- '%WINDIR%\Temp\_ex-68.exe' (downloaded from the Internet)
- %WINDIR%\Temp\_ex-08.exe
- %WINDIR%\Temp\_ex-68.exe
- 've##vyt.in':80
- 'cy##roh.in':80
- http://ve##vyt.in/notepad.exe
- http://cy##roh.in/rtce003.exe
- DNS ASK ve##vyt.in
- DNS ASK cy##roh.in