Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\SYSTEM\CurrentControlSet\Services\cpuz165] 'ImagePath' = '%ALLUSERSPROFILE%\CPUID Software\cpu-z\VR8QQ7atzvR'
Creates the following services
- 'cpuz165' %ALLUSERSPROFILE%\CPUID Software\cpu-z\\VR8QQ7atzvR
- 'cpuz165' %ALLUSERSPROFILE%\CPUID Software\cpu-z\VR8QQ7atzvR
Modifies file system
Creates the following files
- %ALLUSERSPROFILE%\cpuid software\cpu-z\vr8qq7atzvr
Network activity
Connects to
- 'do####ad.cpuid.com':443
- 'x1.#.lencr.org':80
- 'x2.#.lencr.org':80
- 'ye.#.lencr.org':80
- 'ye#.#.lencr.org':80
TCP
HTTP GET requests
- http://x2.#.lencr.org/
- http://ye.#.lencr.org/
- http://ye#.#.lencr.org/85.crl
Other
- 'do####ad.cpuid.com':443
UDP
- DNS ASK do####ad.cpuid.com
- DNS ASK x1.#.lencr.org
- DNS ASK x2.#.lencr.org
- DNS ASK ye.#.lencr.org
- DNS ASK ye#.#.lencr.org
