Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft® Windows® Operating System' = '<LS_APPDATA>\explorer.exe'
- <Current directory>\sxe3.tmp
- <LS_APPDATA>\explorer.exe
- <Current directory>\key-CRNJEUFU.txt
- <Current directory>\sxe3.tmp
- <Current directory>\sxe2.tmp
- <Current directory>\sxe1.tmp
- <Current directory>\sxe1.tmp
- <Current directory>\sxe2.tmp
- 'cl######ineops.no-ip.org':8841
- DNS ASK cl######ineops.no-ip.org