Technical Information
- %APPDATA%\pqrstu wxyabcde ghi\pqrstu wxyabcde ghi.exe
- %APPDATA%\pqrstu wxyabcde ghi\pqrstu wxyabcde ghi.exe.lnk
- aeuli
- %APPDATA%\pqrstu wxyabcde ghi\pqrstu wxyabcde ghi.exe
- %APPDATA%\pqrstu wxyabcde ghi\pqrstu wxyabcde ghi.exe.lnk
- 'df###fa.kro.kr':1234
- DNS ASK df###fa.kro.kr
- DNS ASK gy#.#yddos.com
- '%APPDATA%\pqrstu wxyabcde ghi\pqrstu wxyabcde ghi.exe'
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul