Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'long' = '%WINDIR%\<File name>.exe'
- '<SYSTEM32>\cmd.exe' /c del "<Full path to file>"
- '%WINDIR%\<File name>.exe'
- %WINDIR%\<File name>.exe
- %WINDIR%\<File name>.exe
- '1.###ojunyk.com':661
- '1.###ojunyk.com':6611
- DNS ASK 1.###ojunyk.com