Technical Information
- %ALLUSERSPROFILE%\152119601237922022915161
- %ALLUSERSPROFILE%\3d0ee00a3f\bween.exe
- '21#.#.117.164':80
- '%ALLUSERSPROFILE%\3d0ee00a3f\bween.exe'
- '%ALLUSERSPROFILE%\3d0ee00a3f\bween.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\3d0ee00a3f\' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\3d0ee00a3f\
- '%WINDIR%\syswow64\reg.exe' ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\3d0ee00a3f\