Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\chrome.exe
- <File name>.exe
- %TEMP%\_qmhjcjrydxiny.vbs
- %TEMP%\<File name>.exe
- DNS ASK google.com
- DNS ASK yo##ube.com
- '<SYSTEM32>\wscript.exe' "%TEMP%\_Qmhjcjrydxiny.vbs"
- '%TEMP%\<File name>.exe'
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Test-Connection www.google.com , www.yo##ube.com , www.google.com , www.yo##ube.com ,www.google.com , www.yo##ube.com' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Set-MpPreference -ExclusionPath C:\,'%APPDATA%\Microsoft\Windows\Start Menu\Programs\Chrome.exe'' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Test-Connection www.google.com , www.yo##ube.com , www.google.com , www.yo##ube.com ,www.google.com , www.yo##ube.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Set-MpPreference -ExclusionPath C:\,'%APPDATA%\Microsoft\Windows\Start Menu\Programs\Chrome.exe'