Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Jflps' = '"%APPDATA%\Bigrdgu\Jflps.exe"'
- %APPDATA%\bigrdgu\jflps.exe
- 'no##se.co':443
- 'microsoft.com':80
- 'di##ord.com':443
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'no##se.co':443
- 'di##ord.com':443
- DNS ASK no##se.co
- DNS ASK microsoft.com
- DNS ASK di##ord.com
- '<SYSTEM32>\cmd.exe' /c timeout 20' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c timeout 20
- '<SYSTEM32>\timeout.exe' 20