Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- <DRIVERS>\beep.sys
- <SYSTEM32>\cmd.exe /c ""%TEMP%\220312.bat" "
- %TEMP%\220312.bat
- <SYSTEM32>\Win6to4Ex.dll
- %TEMP%\Sys843.dll
- from <SYSTEM32>\Win6to4Ex.dll to <SYSTEM32>\343.log
- '99##.ali114.net':9999
- DNS ASK 99##.ali114.net