Technical Information
- %TEMP%\koq2wmou
- %TEMP%\koq2wmou.dll
- http://www.tm###ssebau.de/to7ob
- http://sp###ki.in.ua/pyp065
- http://an######nelli.interfree.it/rfer0z1
- DNS ASK tm###ssebau.de
- DNS ASK wa###ewang.name
- DNS ASK sp###ki.in.ua
- DNS ASK an######nelli.interfree.it
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\kOQ2WmoU.dll,qwerty 323