Technical Information
- %TEMP%\1.docx
- %TEMP%\1.exe
- '60.##5.231.69':4143
- '%TEMP%\1.exe'
- '%WINDIR%\syswow64\cmd.exe' /C %temp%\1.docx' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C %temp%\1.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C %temp%\1.exe
- '%WINDIR%\syswow64\cmd.exe' /C %temp%\1.docx
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\1.docx"