Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '01ae6756b46dc4c48cf471b205affd9e' = 'regsvr32.exe /s /n /u /i:"%APPDATA%\OT7S22FZ3ZE.txt" scrobj.dll.'
- %APPDATA%\ot7s22fz3ze.txt
- http://st####.##iinformationsec.com/t
- DNS ASK sm###.#loudnetwork.kz
- DNS ASK st####.#piinformation.kz
- DNS ASK se####.#scontentmaker.kz
- DNS ASK se####.#sc0nten1maker.com
- DNS ASK st####.##iinformationsec.com
- DNS ASK me#.####dcontentsmak.com
- DNS ASK ni###.##permicrotransapi.ru
- DNS ASK te#.###pisettings.kz
- DNS ASK js.#####etopdevelopment.kz
- DNS ASK no###.###tentmakersbyakamai.ru