Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\yVXx.lnk
- %HOMEPATH%\Start Menu\Programs\Startup.lnk
- C:\Dogfm\bDFfTHQP\yVXx\Dogfm.vbs
- 'pa###-dark.com':443
- DNS ASK pa###-dark.com
- '<SYSTEM32>\wscript.exe' "C:\Dogfm\bDFfTHQP\yVXx\Dogfm.vbs"
- '<SYSTEM32>\cmd.exe' /c start C:\Dogfm\bDFfTHQP\yVXx\\Dogfm.vbs