Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\keymmdrv] 'ImagePath' = '<SYSTEM32>\asm_drivers\keymmdrv.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\MicrosoftEngineering] 'ImagePath' = '<Full path to virus>'
- [<HKLM>\SYSTEM\ControlSet001\Services\MicrosoftEngineering] 'Start' = '00000002'
- <SYSTEM32>\asm_drivers\keymmdrv.sys
- 'www.ca####justerll.com':443
- DNS ASK www.ca####justerll.com