Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ImportantBackup' = '"%ALLUSERSPROFILE%\Task.Manager\runbackup.exe" '
- <Current directory>\google123.txt
- %ALLUSERSPROFILE%\task.manager\runbackup.exe
- <Current directory>\google123.txt
- 'my####supload.biz':80
- 'pa###bin.com':80
- 'pa###bin.com':443
- http://pa###bin.com/raw/R56h2Yje
- 'pa###bin.com':443
- DNS ASK my####supload.biz
- DNS ASK pa###bin.com
- DNS ASK te###pload.us
- DNS ASK te###ata.biz