Technical Information
- '%APPDATA%\bin_cdfc.exe'
- http://18#.#34.216.174/bin_cdfc.exe as %appdata%\bin_cdfc.exe
- %WINDIR%\explorer.exe
- %WINDIR%\syswow64\svchost.exe
- bin_cdfc.exe
- iexplore.exe
- iexplore.exe process, wininet.dll module
- %PROGRAMDATA%\hrjytrj.cmd
- %APPDATA%\bin_cdfc.exe
- %APPDATA%\bin_cdfc.exe
- http://18#.#34.216.174/bin_CDFC.exe
- DNS ASK drive.google.com
- DNS ASK do#########ocs.googleusercontent.com
- '%WINDIR%\syswow64\svchost.exe'
- '%WINDIR%\syswow64\cmd.exe' del "%APPDATA%\bin_CDFC.exe"