Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SelfRunDemo' = '"C:\Users\Public\Downloads\1197292\Applic.exe"'
- %WINDIR%\temp\fwtsqmfile01.sqm
- C:\users\public\downloads\aa.exe
- C:\users\public\downloads\b.zip
- C:\users\public\downloads\s.lnk
- C:\users\public\downloads\1197292\applic.exe
- C:\users\public\downloads\1197292\outllib.dll
- C:\users\public\downloads\1197292\template.txt
- 'ns###mdjs.com':5780
- DNS ASK ns###mdjs.com
- 'C:\users\public\downloads\aa.exe' -o -d C:\Users\Public\Downloads\1197292 C:\Users\Public\Downloads\b.zip
- 'C:\users\public\downloads\1197292\applic.exe'
- 'C:\users\public\downloads\aa.exe' -o -d C:\Users\Public\Downloads\1197292 C:\Users\Public\Downloads\b.zip' (with hidden window)