Technical Information
- %WINDIR%\tasks\fsnjf.job
- <SYSTEM32>\tasks\fsnjf
- %ALLUSERSPROFILE%\cpjdu\fsnjf.exe
- 'sh###eb95.xyz':4044
- 'ap#.#pify.org':443
- '86.#9.21.38':80
- '12#.31.0.39':9131
- '24.##2.244.99':9001
- '21#.#3.232.181':443
- 'ap#.#pify.org':443
- '24.##2.244.99':9001
- DNS ASK ad###tsp74.xyz
- DNS ASK sh###eb95.xyz
- DNS ASK ap#.#pify.org
- '%ALLUSERSPROFILE%\cpjdu\fsnjf.exe' start
- '%ALLUSERSPROFILE%\cpjdu\fsnjf.exe' start' (with hidden window)