Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DA718FE4B7F81953448019' = '%APPDATA%\DA718FE4B7F81953448019\DA718FE4B7F81953448019.exe'
- da718fe4b7f81953448019.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- %TEMP%\da718fe4b7f81953448019
- %APPDATA%\da718fe4b7f81953448019\da718fe4b7f81953448019.exe
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js
- '62.##3.117.136':80
- '%APPDATA%\da718fe4b7f81953448019\da718fe4b7f81953448019.exe'