Technical Information
- '<Current directory>\se.exe'
- '<Current directory>\se.exe' (downloaded from the Internet)
- '<SYSTEM32>\cmd.exe' /c <Current directory>\dele.bat
- <Current directory>\se
- <Current directory>\dele.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\se[1]
- %TEMP%\~DF4B0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\se[1]
- from <Current directory>\se to <Current directory>\se.exe
- 'au#######.service-support-team.com':80
- 'localhost':1036
- au#######.service-support-team.com/se
- DNS ASK au#######.service-support-team.com