Technical Information
- <SYSTEM32>\notepad.exe
- 'se###omax.com':80
- http://se###omax.com/Nqngysz_Ctbnodbz.bmp
- DNS ASK st####verflow.com
- DNS ASK se###omax.com
- '<SYSTEM32>\cmd.exe' /c timeout 45' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c timeout 45
- '<SYSTEM32>\timeout.exe' 45
- '<SYSTEM32>\cmd.exe' /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0
- '<SYSTEM32>\powercfg.exe' /x -hibernate-timeout-ac 0
- '<SYSTEM32>\powercfg.exe' /x -hibernate-timeout-dc 0
- '<SYSTEM32>\powercfg.exe' /x -standby-timeout-ac 0
- '<SYSTEM32>\powercfg.exe' /x -standby-timeout-dc 0
- '<SYSTEM32>\notepad.exe' bzlijwpfxetxtexy0 6E3sjfZq2rJQaxvLPmXgsBL6xjjYguHWtOpZ+stIdvsjpN5Mqdy4DBfa6KATFfaKzupTJUiUlGk5CE8MNkT5PO/x9iCJLNXP9kCB0x8uPKi26HpwNjQPs5cOdxg44rvtQpLQvp9onuW3AUiIU1BXaxxOLLal5RmtJhhx7LDnYThGUk5...