Technical Information
- 92626ddd-662c-49e3-ac59-f6535f12d189
- 81325ce1-be01-4250-944f-b4789644556f
- 02ee49e2-e294-4d0f-9278-f5b3212fc588
- 20f0ee37-5942-4e45-b7d5-c5b5db9df5cd
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<File name>' = '%APPDATA%\<File name>.exe'
- <SYSTEM32>\tasks\<File name>
- %APPDATA%\<File name>.exe
- DNS ASK Ba#######kit-63950.portmap.host
- '<SYSTEM32>\schtasks.exe' /create /f /sc minute /mo 1 /tn "<File name>" /tr "%APPDATA%\<File name>.exe"
- '<SYSTEM32>\schtasks.exe' /create /f /sc minute /mo 1 /tn "<File name>" /tr "%APPDATA%\<File name>.exe"' (with hidden window)