Technical Information
- %WINDIR%\tasks\chocochug.job
- %ALLUSERSPROFILE%\application data\{95565509-e389-219d-9556-65509e385427}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{95565509-e389-219d-9556-65509e385427}\<File name>.dat
- DNS ASK ge###luesee.com
- DNS ASK al####el-pro.com
- DNS ASK mo###odel.biz
- DNS ASK pa###tmodel.biz