Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'NetWire' = '%APPDATA%\Install\Host.exe'
- host.exe
- %APPDATA%\install\host.exe
- http://www.me###fire.com/file/y6y3s9u13qw5mod/USB_encrypted_78777A0.bin/file
- http://do######2265.mediafire.com/x4gljphpveyg/y6y3s9u13qw5mod/USB_encrypted_78777A0.bin
- DNS ASK me###fire.com
- DNS ASK do######2265.mediafire.com
- DNS ASK au####n.duckdns.org
- '%APPDATA%\install\host.exe'