Technical Information
- %WINDIR%\tasks\easyweb.job
- %ALLUSERSPROFILE%\application data\{c12550cb-15e2-3100-c125-550cb15e432c}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{c12550cb-15e2-3100-c125-550cb15e432c}\<File name>.dat
- DNS ASK gr###model.biz
- DNS ASK al####el-pro.com
- DNS ASK ri###ynorth.biz
- DNS ASK fu###set.work