Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %WINDIR%\Tasks\TypicalChemical.job
Modifies file system:
Creates the following files:
- %ALLUSERSPROFILE%\Application Data\{67ef2e10-f136-fe2c-67ef-f2e10f13b843}\<File name>.dat
- %ALLUSERSPROFILE%\Application Data\{67ef2e10-f136-fe2c-67ef-f2e10f13b843}\<File name>.exe
Network activity:
Connects to:
- 'ce####-ring.link':80
TCP:
HTTP GET requests:
- http://ce####-ring.link/?q=######################################################################################################################################################################...
UDP:
- DNS ASK ce####-ring.link
