Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'e9a6c1f41922160a7c5b71f2ca465045' = '"%TEMP%\NingaliNET v1.1.0.0-Cracked.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e9a6c1f41922160a7c5b71f2ca465045' = '"%TEMP%\NingaliNET v1.1.0.0-Cracked.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\e9a6c1f41922160a7c5b71f2ca465045.exe
- %TEMP%\NingaliNET v1.1.0.0-Cracked.exe
- '17#.#31.49.184':1997
- 'ha#####0x22.ddns.net':1997
- DNS ASK ha#####0x22.ddns.net
- '%TEMP%\NingaliNET v1.1.0.0-Cracked.exe'