Technical Information
- hidden files
- %HOMEPATH%\desktop\<File name>.lnk
- <Current directory>\ìì°á.exe
- <Current directory>\tqdl\lserver.exe
- <Current directory>\ìì°á.exe
- <Current directory>\tqdl\lserver.exe
- http://11#.##6.116.250:81/rxjh.inf via 11#.#16.116.250
- DNS ASK ba##u.com
- '<Current directory>\tqdl\lserver.exe' ABCDE12345dfD58Pj4+ek95d3dRfDx8TVRreUxqRTJPQzR4TGpJd01BW3xdTVRFMExqRXhOaTR4TVRZdU1qVXdPamd4fC0+fE1qQXlNUzB3TlMweU5RL1xNakF6TUMwd05TMHlOUS1fLU1RPT0=z==