Technical Information
- '' (downloaded from the Internet)
- '%APPDATA%\vbc.exe'
- %APPDATA%\vbc.exe
- %TEMP%\nsq5df.tmp
- http://ch############lyywalkaloneinlifea4kgs.duckdns.org/chnsfrnd2/winlog.exe
- DNS ASK ch############lyywalkaloneinlifea4kgs.duckdns.org
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding