Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'zxzz' = '%APPDATA%\zxzx.exe'
Modifies file system
Creates the following files
- %APPDATA%\zxzzzz.txt
- %APPDATA%\zxzx.exe
- %LOCALAPPDATA%\microsoft\clr_v4.0_32\usagelogs\<File name>.exe.log
- %APPDATA%\1.txt
Network activity
Connects to
- 'sites.google.com':443
TCP
Other
- 'sites.google.com':443
UDP
- DNS ASK sites.google.com
Miscellaneous
Creates and executes the following
- '%APPDATA%\zxzx.exe'
