Technical Information
Modifies file system:
Creates the following files:
- %TEMP%\is-K9I97.tmp\<File name>.tmp
- %TEMP%\is-KBQPM.tmp\idp.dll
- %TEMP%\is-KBQPM.tmp\itdownload.dll
- %TEMP%\is-KBQPM.tmp\setup.exe.config
- %TEMP%\is-KBQPM.tmp\HotelCalifornia.exe.config
- %TEMP%\is-KBQPM.tmp\HotelCalifornia.exe
Deletes the following files:
- %TEMP%\is-KBQPM.tmp\HotelCalifornia.exe
- %TEMP%\is-KBQPM.tmp\HotelCalifornia.exe.config
- %TEMP%\is-K9I97.tmp\<File name>.tmp
Modifies the HOSTS file.
Network activity:
Connects to:
- 's3######st-1.amazonaws.com':443
UDP:
- DNS ASK s3######st-1.amazonaws.com
Miscellaneous:
Creates and executes the following:
- '%TEMP%\is-K9I97.tmp\<File name>.tmp' /SL5="$30092,417599,242688,<Full path to file>"
- '%TEMP%\is-KBQPM.tmp\HotelCalifornia.exe'
