Technical Information
- <SYSTEM32>\tasks\firefox default browser agent d7614c005a8894bd
- %WINDIR%\explorer.exe
- %APPDATA%\rfuscah
- %APPDATA%\rfuscah
- 'ba##info.at':80
- 'im###obi.com':80
- 'eq##x.ru':80
- 'wo###alltv.com':80
- 'go###ratia.ru':80
- http://ba##info.at/upload/
- http://eq##x.ru/upload/
- http://wo###alltv.com/upload/
- http://go###ratia.ru/upload/
- DNS ASK ba##info.at
- DNS ASK im###obi.com
- DNS ASK eq##x.ru
- DNS ASK wo###alltv.com
- DNS ASK ne####hgallery.com
- DNS ASK li###server.ru
- DNS ASK go###ratia.ru
- '%APPDATA%\rfuscah'
- '%APPDATA%\rfuscah' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {9D21205B-D77A-4441-9ADA-84231CED6FA5} S-1-5-21-1960123792-2022915161-3775307078-1001:wkfnsl\user:Interactive:[1]