Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Siratetz' = '%HOMEPATH%\Disclaim4\Chora.vbs'
- chora.exe
- %HOMEPATH%\disclaim4\chora.exe
- %HOMEPATH%\disclaim4\chora.vbs
- 'oi####7.ddns.net':6785
- 'on####ve.live.com':443
- '7g####.#n.files.1drv.com':443
- DNS ASK on####ve.live.com
- DNS ASK 7g####.#n.files.1drv.com
- DNS ASK oi####7.ddns.net
- '%HOMEPATH%\disclaim4\chora.exe'