Technical Information
- <SYSTEM32>\tasks\wpd\mozilla launcher
- %PROGRAMDATA%\mozilla\mozillalauncher.exe
- %PROGRAMDATA%\mozilla\mozillalauncher.xml
- %PROGRAMDATA%\mozilla\mozillalauncher.xml
- http://id##t.me/
- http://na##iraq.iq/wp-includes/class-wp-header-styles.php
- DNS ASK id##t.me
- DNS ASK na##iraq.iq
- DNS ASK so###power.com
- '%WINDIR%\syswow64\schtasks.exe' /delete /tn "Mozilla Launcher" /f
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WPD\Mozilla Launcher" /xml "%PROGRAMDATA%\Mozilla\MozillaLauncher.xml"