Technical Information
- %TEMP%\pgbggjln
- 'oy####saat.com.tr':80
- 'pt###start.com':80
- 'py###sheng.com':80
- 'po####kerjaya.com':80
- http://oy####saat.com.tr/iqymzj6f
- http://pt###start.com/ol7z9hgiby
- http://py###sheng.com/qlmpettl1z
- http://po####kerjaya.com/in5jy3
- DNS ASK oy####saat.com.tr
- DNS ASK pt###start.com
- DNS ASK fa#####ognition.com.ba
- DNS ASK py###sheng.com
- DNS ASK po####kerjaya.com