Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.lnk
- %PROGRAMDATA%\{8c62d145-3d07-0987-8c62-2d1453d04514}\<File name>.exe
- %PROGRAMDATA%\{8c62d145-3d07-0987-8c62-2d1453d04514}\<File name>.dat
- DNS ASK ki###whale.info
- DNS ASK gu###liban.info