Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7e2769937933f4ea87e9d686c6952d24' = '"%TEMP%\Discordjs.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7e2769937933f4ea87e9d686c6952d24' = '"%TEMP%\Discordjs.exe" ..'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\Discordjs.exe' = '%TEMP%\Discordjs.exe:*:Enabled:Discordjs.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Discordjs.exe" "Discordjs.exe" ENABLE
- %TEMP%\Discordjs.exe
- 'ro####bh.ddns.net':5552
- DNS ASK ro####bh.ddns.net
- '%TEMP%\Discordjs.exe'