Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Supralitto7' = '%HOMEPATH%\lamentmi\Pupperum6.vbs'
- pupperum6.exe
- %HOMEPATH%\lamentmi\pupperum6.exe
- %HOMEPATH%\lamentmi\pupperum6.vbs
- 'me####ashion.com':443
- DNS ASK me####ashion.com
- '%HOMEPATH%\lamentmi\pupperum6.exe'