Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\lub.exe' = '%APPDATA%\lub.exe:*:Enabled:lub.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\lub.exe" "lub.exe" ENABLE
- %APPDATA%\lub.exe
- 'ou#####s765.ddns.net':1177
- DNS ASK ou#####s765.ddns.net
- '%APPDATA%\lub.exe'