Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8303cafc56974b258ff2863df8741c4b' = '%APPDATA%\shost.exe'
Creates or modifies the following files:
- %HOMEPATH%\Start Menu\Programs\Startup\shost.exe
Modifies file system:
Creates the following files:
- %APPDATA%\shost.exe
Network activity:
Connects to:
- 'se######oogle.myfreeip.me':1177
UDP:
- DNS ASK se######oogle.myfreeip.me
Miscellaneous:
Creates and executes the following:
- '%APPDATA%\shost.exe'
