Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vlc' = '"%APPDATA%\Microsoft\Windows\Start Menu\Programs\VideoLAN\vlc.exe"'
- <SYSTEM32>\tasks\logs
- logs.exe
- %APPDATA%\microsoft\windows\start menu\programs\videolan\vlc.exe
- %TEMP%\logs.exe
- %TEMP%\tmp2f88.tmp.bat
- nul
- 'fr####1.ddns.net':2256
- DNS ASK fr####1.ddns.net
- '%TEMP%\logs.exe'
- '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /f /sc onlogon /rl highest /tn "logs" /tr '"%TEMP%\logs.exe"' & exit' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /f /sc onlogon /rl highest /tn "logs" /tr '"%TEMP%\logs.exe"' & exit
- '%WINDIR%\syswow64\schtasks.exe' /create /f /sc onlogon /rl highest /tn "logs" /tr '"%TEMP%\logs.exe"'
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\tmp2F88.tmp.bat""
- '%WINDIR%\syswow64\timeout.exe' 3