Technical Information
- %APPDATA%\chaearxer\searchindexer.exe
- %TEMP%\383caee401dd.cmd
- nul
- %TEMP%\383caee401dd.cmd
- http://sa####cachorro.com/bc/gate.php?ct##
- DNS ASK microsoft.com
- DNS ASK to###usical.com
- DNS ASK sa####cachorro.com
- '%APPDATA%\chaearxer\searchindexer.exe' 0
- '%APPDATA%\chaearxer\searchindexer.exe' 0' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\383CAEE401DD.cmd" 0"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\383CAEE401DD.cmd" 0"
- '%WINDIR%\syswow64\ping.exe' -n 4 127.0.0.1