Technical Information
- [<HKCU>\software\Microsoft\Windows\CurrentVersion\Run] 'A1MJMR2KSU' = '%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\A1MJMR2KSU.lnk'
- %APPDATA%\microsoft\windows\start menu\programs\startup\a1mjmr2ksu.lnk
- 'md#####.##-us-west-1.amazonaws.com':443
- DNS ASK md#####.##-us-west-1.amazonaws.com