Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Settings' = '%APPDATA%\Install\MSC.exe'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{1I8IUDM5-DL2H-2BAW-5L4S-6416T48RES84}] 'StubPath' = '"%APPDATA%\Install\MSC.exe"'
- msc.exe
- %TEMP%\quotation.jpg
- %APPDATA%\install\msc.exe
- DNS ASK be#####s.100chickens.me
- '%APPDATA%\install\msc.exe'