Technical Information
- %TEMP%\zf8a1lpzv8zo
- %TEMP%\zf8a1lpzv8zo.dll
- http://ba#######story.portalstream.net/9meuwqp
- http://bo####ghotworld.ws/0is3rn
- http://si#######dalweddingmakeup.co.uk/auuw2x8f
- http://mi####.web.fc2.com/hj01mzvs
- DNS ASK ba#######story.portalstream.net
- DNS ASK bo####ghotworld.ws
- DNS ASK si#######dalweddingmakeup.co.uk
- DNS ASK mi####.web.fc2.com
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\ZF8A1L~1.DLL,qwerty 323