Technical Information
- %TEMP%\lxfkhbr.js
- %TEMP%\fmrrdcv_66429.exe
- http://ca###rstea.com/1G3mEb
- http://dr###nex.com/w9IjYE
- http://fa###eal.com/8BW1Mx
- http://op##6.ru/q5p7uL
- http://av###ix.com.br/mgw1Z9
- DNS ASK ca###rstea.com
- DNS ASK dr###nex.com
- DNS ASK le######cyandsupply.com.sg
- DNS ASK fa###eal.com
- DNS ASK op##6.ru
- DNS ASK av###ix.com.br
- '<SYSTEM32>\wscript.exe' %TEMP%\LxFKHBR.js