Technical Information
- %WINDIR%\Tasks\Manager.job
- %WINDIR%\Tasks\explorer.job
- %TEMP%\1.tmp.zip
- %APPDATA%\xbooster\xmrig.exe
- 'xm#####.nanopool.org':14444
- 'zt###ker.xyz':80
- http://zt###ker.xyz/click.php?cn######
- DNS ASK xm#####.nanopool.org
- DNS ASK zt###ker.xyz
- '%APPDATA%\xbooster\xmrig.exe' -o stratum+tcp://xmr-eu1.nanopool.org:14444 -u 45amt6kvQJo7kUKnrcwLuAV4vo8hfeu8kWhkjP39P6JCQ64oiTEyqAe7Z8fUxBCFLxBQzYEzkAFVsSeDv7bg5dFM4efV5mc/79 -p x --donate-level=1 -B -t 1