Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'JlUGG' = 'C:\onbnoujjqoj\JlUGGf\JlUGGfVFr.vbs'
- %WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe
- C:\onbnoujjqoj\jluggf\jluggfvfr.vbs
- C:\onbnoujjqoj\jluggf\jlugg.exe
- 'ju######ry.theworkpc.com':3367
- DNS ASK ju######ry.theworkpc.com
- '%WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe'