Technical Information
- '%TEMP%\S-1-.exe'
- '<SYSTEM32>\wscript.exe' "%TEMP%\test.vbs"
- '<SYSTEM32>\cmd.exe' /c Ping oldschool1.runescape.com -n 1 | FIND "time="
- '<SYSTEM32>\ping.exe' oldschool1.runescape.com -n 1
- '<SYSTEM32>\find.exe' "time="
- '<SYSTEM32>\cmd.exe' /S /D /c" SET /p=World 1"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\0.bat" "
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'
- '<SYSTEM32>\cmd.exe' /S /D /c" Echo "
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- %APPDATA%\Imminent\Monitoring\system.dat
- %APPDATA%\Imminent\Logs\22-11-2017
- %TEMP%\S-1-.exe
- %APPDATA%\Imminent\Monitoring\network.dat
- %TEMP%\test.vbs
- %TEMP%\S-1-5-21-2052111302-484763869-725345543-1003.lnk
- %TEMP%\0.bat
- C:\84-2031112502-12-5-1-S\S-1-5-21-2052111302-48.exe
- '10#.#72.193.184':8888
- DNS ASK ol######l1.runescape.com