Technical Information
- %WINDIR%\tasks\rockettasks.job
- %ALLUSERSPROFILE%\application data\{99837271-ec28-49c1-9983-37271ec2c9c7}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{99837271-ec28-49c1-9983-37271ec2c9c7}\<File name>.dat
- DNS ASK gr###model.biz
- DNS ASK al####el-pro.com
- DNS ASK mo###odel.biz
- DNS ASK fu###et.info