Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'atlas2.0' = '%PROGRAMDATA%\AtlasFiles2.0\rekeywiz.exe'
- '%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe' "%TEMP%\AFC New Board.pdf"
- '<SYSTEM32>\mshta.exe' %TEMP%\CtwGY2KAB3ig.hta
- '%PROGRAMDATA%\atlasfiles2.0\rekeywiz.exe'
- %TEMP%\afc new board.pdf
- %TEMP%\ctwgy2kab3ig.hta
- %PROGRAMDATA%\atlasfiles2.0\rekeywiz.exe
- %PROGRAMDATA%\atlasfiles2.0\duser.dll
- %PROGRAMDATA%\atlasfiles2.0\cbpa02s.tmp
- %PROGRAMDATA%\atlasfiles2.0\rekeywiz.exe.config
- %TEMP%\ctwgy2kab3ig.hta
- http://ww####c.chrom3.net/images/CB89385B/34709/1707/818e7afd/9753be6
- http://ww####c.chrom3.net/plugins/34709/1707/true/true/
- http://ww####c.chrom3.net/cgi/edce243895/34709/1707/1116dea5/file.hta
- DNS ASK ww####c.chrom3.net