Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\ririri.exe
- ClassName: 'FilemonClass', WindowName: ''
- ClassName: 'PROCMON_WINDOW_CLASS', WindowName: ''
- ClassName: 'RegmonClass', WindowName: ''
- %TEMP%\21130707-67bd-4fd2-91d2-b9f759127e7b\gunauidotnetrt.dll
- 'ra#.####ubusercontent.com':443
- 'cd#.##scordapp.com':443
- 'ch####p.dyndns.com':80
- 'di##ord.com':443
- 'ra#.####ubusercontent.com':443
- 'cd#.##scordapp.com':443
- 'di##ord.com':443
- DNS ASK ra#.####ubusercontent.com
- DNS ASK cd#.##scordapp.com
- DNS ASK ch####p.dyndns.com
- DNS ASK di##ord.com
- ClassName: 'File Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: 'Process Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: 'Registry Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: '18467-41' WindowName: ''