Technical Information
- http://db##c.xyz/mat6qcqHR2wI3I6b/conf.php
- http://db##c.xyz/
- DNS ASK db##c.xyz
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "<Full path to file>"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1