Technical Information
- <Current directory>\kssplugin.dll
- <Current directory>\ba1a49a1.exe
- <Current directory>\selfdelete.bat
- C:\kss.ini
- 'lo###.pepsis.xyz':80
- DNS ASK do##.pepsis.xyz
- DNS ASK pe##is.xyz
- DNS ASK lo###.pepsis.xyz
- '<Current directory>\ba1a49a1.exe'
- '%WINDIR%\syswow64\cmd.exe' /c SelfDelete.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c SelfDelete.bat