Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\kmrwxjebjf.lnk
- '2.##.119.2':21
- '2.##.119.2':49960
- 'la#####protector.com':80
- 'la#####protector.com':443
- http://la#####protector.com/privatebinler/ODUGSIF.bin
- '2.##.119.2':21
- 'la#####protector.com':443
- DNS ASK la#####protector.com