Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Internet Explorer Updater' = '%APPDATA%\IE\updater.exe'
- '<SYSTEM32>\ftp.exe' -s:"%APPDATA%\IE\FTPCommands.txt"
- '<SYSTEM32>\cmd.exe' /c ftp.exe -s:"%APPDATA%\IE\FTPCommands.txt"
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\7-Ziр\proc.bat"
- %APPDATA%\7-Ziр\6866671ready.txt
- %APPDATA%\IE\FTPCommands.txt
- %APPDATA%\7-Ziр\proc.bat
- %APPDATA%\7-Ziр\6866671.txt
- %APPDATA%\7-Ziр\base64.dll
- %APPDATA%\IE\FTPCommands.txt
- %APPDATA%\7-Ziр\proc.bat
- '18#.#80.198.79':21
- 'localhost':1036
- ClassName: 'AutoHotkey' WindowName: '<Full path to file>'