Technical Information
- %WINDIR%\tasks\cleversketch.job
- %ALLUSERSPROFILE%\application data\{024e60a4-239d-b2a6-024e-e60a42398290}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{024e60a4-239d-b2a6-024e-e60a42398290}\<File name>.dat
- DNS ASK pa###tmodel.biz
- DNS ASK al####el-pro.com
- DNS ASK fu###et.info
- DNS ASK fu###set.work