Technical Information
- ghijkl nopqrstu wxy.exe
- %APPDATA%\ghijkl nopqrstu wxy\ghijkl nopqrstu wxy.exe
- %APPDATA%\ghijkl nopqrstu wxy\ghijkl nopqrstu wxy.exe.lnk
- aeuli
- %APPDATA%\ghijkl nopqrstu wxy\ghijkl nopqrstu wxy.exe
- %APPDATA%\ghijkl nopqrstu wxy\ghijkl nopqrstu wxy.exe.lnk
- 'jh###j.kro.kr':6969
- DNS ASK jh###j.kro.kr
- DNS ASK gy#.#yddos.com
- '%APPDATA%\ghijkl nopqrstu wxy\ghijkl nopqrstu wxy.exe'
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul