Technical Information
- %HOMEPATH%\documents\yzuq4m.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\yzuq4m.exe
- %HOMEPATH%\documents\etoken.dll
- 'id####.###-cn-beijing.aliyuncs.com':443
- 'id####.###-cn-beijing.aliyuncs.com':443
- DNS ASK id####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\yzuq4m.exe'
- '<SYSTEM32>\taskeng.exe' {D59F3610-1041-40FD-A19F-3A618D8FC7BC} S-1-5-21-3691498038-2086406363-2140527554-1000:shreuxyouq\user:Interactive:[1]
- '%HOMEPATH%\documents\yzuq4m.exe' ' (with hidden window)