Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'sqqoehcsjqtvsjlnjlbffivcclmwam' = '%APPDATA%\eowllqgmrj.exe'
- %APPDATA%\microsoft\windows\start menu\programs\startup\nafzzyywafhv.exe
- %APPDATA%\eowllqgmrj.exe
- DNS ASK ci####ersuasion.com
- DNS ASK la###chimp.xyz