Technical Information
- %TEMP%\7fgfqq224.dll
- http://as###buffet.ca/wa18rel7
- http://ax##dha.net/6rbjg
- http://sh###rat.net/6ucp31q
- http://bu##cher.co/upm89
- DNS ASK as###buffet.ca
- DNS ASK al####drkireev.ru
- DNS ASK ax##dha.net
- DNS ASK sh###rat.net
- DNS ASK bu##cher.co
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\7FGFQQ~1.DLL,0001