Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'A5605EF4B6882225065987' = '%APPDATA%\A5605EF4B6882225065987\A5605EF4B6882225065987.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- %TEMP%\a5605ef4b6882225065987
- %APPDATA%\a5605ef4b6882225065987\a5605ef4b6882225065987.exe
- DNS ASK li####.sytes.net
- '%APPDATA%\a5605ef4b6882225065987\a5605ef4b6882225065987.exe'