Technical Information
- [<HKLM>\SYSTEM\ControlSet001\services\<Auxiliary name>] 'Start' = '00000001'
- <Current directory>\<Virus name>.log
- <Current directory>\<Virus name>\SSL\Hades CA.pvk
- <Current directory>\<Virus name>\SSL\Hades CA.cer
- DNS ASK dn#.##ftncsi.com
- DNS ASK lo#.##ta-url.com
- ClassName: 'Shell_TrayWnd' WindowName: ''