Technical Information
- '<SYSTEM32>\rundll32.exe' ..\rieuro.vnt,DllRegisterServer
- <Current directory>\c0b11000
- <PATH_SAMPLE>.xls
- 'fa####m2s.com.br':443
- 'oc##.thawte.com':80
- 'oc##.#tartssl.com':80
- 'fa####m2s.com.br':443
- DNS ASK fa####m2s.com.br
- DNS ASK st####.rapidssl.com
- DNS ASK oc##.thawte.com
- DNS ASK oc##.#tartssl.com
- '<SYSTEM32>\rundll32.exe' ..\rieuro.vnt,DllRegisterServer' (with hidden window)