Technical Information
- %WINDIR%\Tasks\{523BB81E-F0F7-DB66-DF65-B82761A00F49}.job
- '%APPDATA%\ZCGvTEgT\cpoUXkhx\oJoWtBhX\AgeRxLwPI.exe'
- %APPDATA%\ZCGvTEgT\cpoUXkhx\oJoWtBhX\AgeRxLwPI.exe
- 'sm###rama.com':443
- 'ku###nik24.com':443
- 're###saz.com':443
- 'co###ra24.com':443
- DNS ASK sm###rama.com
- DNS ASK ku###nik24.com
- DNS ASK re###saz.com
- DNS ASK co###ra24.com