Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Static Loader' = '%APPDATA%\Static Loader\Loader.exe'
- %APPDATA%\static loader\loader.exe
- 'cd#.##scordapp.com':443
- 'ol##ath.com':80
- http://ol##ath.com/Bxgxf.exe
- 'cd#.##scordapp.com':443
- DNS ASK cd#.##scordapp.com
- DNS ASK ol##ath.com