Technical Information
- '<SYSTEM32>\rundll32.exe' "%TEMP%\ins1.tmp",vfajljqyjdqxti install
- %TEMP%\ins1.tmp
- 'kc###os.co.be':80
- kc###os.co.be/VCkpOgCmMNhKOVy34sv1PxaIoIFpBdQGHFm4Ex/Vmc6SRxNCmAUeP7MsmLmS3p+SLh1L2P+RCi6hO/7kIE8Gzc6K5q88NDbAokX9QSQZgia6Ag==
- kc###os.co.be/ONGWSRAHiT8J4arwKDR28fmRwi0nFylfI++H+mCdDwIRNLCwAeL0GAsbYaQG74CR6+TYA0e4YPeK6PiEzLvf+Z1Cl1gnrsbcTw9FglG3xG+0OmQCTGYdAdp/SvM69CEJ2uEgw1uZP6nmSOCEp8W4KgmL+uLIQ/8iB3kjtPP5FJmz/3bTIEUdZWUNT2Hums1gAGg1zwBI6/A=
- DNS ASK kc###os.co.be
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'