Technical Information
- %WINDIR%\explorer.exe
- 'cd#.##scordapp.com':443
- 'mb###ucky.com':80
- 'co#####erdesigns.net':80
- 'in####sionuk.co.uk':80
- 'gr###tore.com':80
- 'cd#.##scordapp.com':443
- DNS ASK cd#.##scordapp.com
- DNS ASK mb###ucky.com
- DNS ASK co#####erdesigns.net
- DNS ASK in####sionuk.co.uk
- DNS ASK gr###tore.com
- '%WINDIR%\syswow64\mobsync.exe'
- '%WINDIR%\syswow64\svchost.exe'
- '%WINDIR%\syswow64\cmd.exe' del "%WINDIR%\SysWOW64\mobsync.exe"