Technical Information
- %WINDIR%\tasks\netspy.job
- %ALLUSERSPROFILE%\application data\{6130debe-a2f2-a0bb-6130-0debea2f7afa}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{6130debe-a2f2-a0bb-6130-0debea2f7afa}\<File name>.dat
- DNS ASK ge###luesee.com
- DNS ASK ce####-ring.link
- DNS ASK ce####-ring.info