Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kntg' = 'C:\Users\Public\Kntg.hta'
- C:\users\public\kntgces.exe
- C:\users\public\kntg.hta
- 'sa####9.duckdns.org':6988
- DNS ASK sa####9.duckdns.org
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'