Technical Information
- DNS server to '223.30.216.88'
- DNS server to '<DNS_SERVER>'
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\coc3.exe
- %TEMP%\6c05.tmp\dns.bat
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\6c05.tmp\dns.bat
- %TEMP%\$inst\2.tmp
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Static' WindowName: ''
- '%TEMP%\coc3.exe'
- '%TEMP%\coc3.exe' ' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\6C05.tmp\dns.bat "%TEMP%\coc3.exe""' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\6C05.tmp\dns.bat "%TEMP%\coc3.exe""
- '<SYSTEM32>\cmd.exe' /c netsh int show interface
- '<SYSTEM32>\netsh.exe' int show interface
- '<SYSTEM32>\netsh.exe' int ipv4 set dns name="Local Area Connection" static 223.30.216.88 primary validate=no
- '<SYSTEM32>\netsh.exe' int ipv4 add dns name="Local Area Connection" 8.8.8.8 index=2 validate=no
- '<SYSTEM32>\ipconfig.exe' /flushdns