Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%WINDIR%\lexplorer.exe'
- %TEMP%\tapgfuzmqg - 3-8-2020-4.56.05-pm.gif
- %TEMP%\tapgfuzmqg - 3-8-2020-4.56.27-pm.txt
- %WINDIR%\lexplorer.exe
- 'ft#.###fo.square7.ch':21
- 'sm##.aplus.net':25
- DNS ASK sm##.aplus.net
- DNS ASK ft#.###fo.square7.ch
- '%WINDIR%\lexplorer.exe'