Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'IJP' = '<Full path to virus>'
- opera.exe
- safari.exe
- iexplore.exe
- chrome.exe
- firefox.exe
- <Current directory>\rdll.dll
- 'rd#t.me':80
- rd#t.me/dl/rdll.dll
- DNS ASK rd#t.me
- ClassName: 'Indicator' WindowName: '(null)'