Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Jcwgvskf.lnk
- <Current directory>\.Identifier
- %APPDATA%\lbjjsrgkv\9614.xml
- <Current directory>\.Identifier
- from %APPDATA%\lbjjsrgkv\9614.xml to %APPDATA%\lbjjsrgkv\Jcwgvskf.exe
- 'ma######ll.dynamic-dns.net':3370
- 'ma######ll.jumpingcrab.com':3360
- DNS ASK ma######ll.dynamic-dns.net
- DNS ASK ma######ll.jumpingcrab.com
- '<Full path to file>'