Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,"%APPDATA%\dll32.exe",'
- <File name>.exe
- %APPDATA%\dll32.exe
- %TEMP%\<File name>.exe
- 'google.com':80
- '13####n.ddns.net':1337
- http://google.com/
- http://www.google.com/
- DNS ASK google.com
- DNS ASK 13####n.ddns.net
- '%TEMP%\<File name>.exe'