Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SteamClient' = '<Full path to file>'
- %LOCALAPPDATA%\tempservices.exe
- %TEMP%\file.exe
- %TEMP%\aut6e2d.tmp
- %TEMP%\357.178725302219
- %TEMP%\aut6e2d.tmp
- 'su#####co.duckdns.org':4000
- DNS ASK su#####co.duckdns.org
- '%LOCALAPPDATA%\tempservices.exe'
- '%TEMP%\file.exe'