Technical Information
- '' (downloaded from the Internet)
- %WINDIR%\skyht_w32.exe
- %WINDIR%\vknt.cfg
- http://sk##t.cf/CheckMayChu.Skyht
- http://ac###e.skyht.cf/hackcf/CFNA/ConsoleLoader.exe
- http://ac###e.skyht.cf/hackcf/CFNA/d3dref9.dll
- DNS ASK sk##t.cf
- DNS ASK ac###e.skyht.cf
- DNS ASK ha###f.skyht.cf
- '%WINDIR%\skyht_w32.exe'
- '%WINDIR%\syswow64\cmd.exe' /c start %WINDIR%\skyht_w32.exe
- '%WINDIR%\syswow64\cmd.exe' /c COLOR 4