Technical Information
- '<LOCALNET>.27.18':0
- http://my####rwalet.top/
- http://my####rwallet.top/
- DNS ASK my####rwalet.top
- DNS ASK my####rwallet.top
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "<Full path to file>"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1