Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\chots.LNK
- %HOMEPATH%\Start Menu\Programs\Startup\conhots.LNK
- %HOMEPATH%\Start Menu\Programs\88E6680F1\chots.exe (downloaded from the Internet)
- %HOMEPATH%\Start Menu\Programs\88E6680F1\conhots.exe (downloaded from the Internet)
- %HOMEPATH%\Start Menu\Programs\88E6680F1\chots.exe
- %HOMEPATH%\Start Menu\Programs\88E6680F1\conhots.exe
- 'www.ne###tech.it':80
- www.ne###tech.it/joomla/images/index_50.jpg
- www.ne###tech.it/joomla/images/index_51.jpg
- DNS ASK www.ne###tech.it
- '<Private IP address>':1038