Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinClientSvc' = '"<Current directory>\WinClientSvc.exe"'
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- <Current directory>\timestamp.dt
- http://hy####view.co.kr/_pgoption/daHK/pgoption_daHK.asp?co####
- http://hy####view.co.kr/_pgoption/daHK/ReList_daHK.asp
- http://hy####view.co.kr/_pgoption/daHK/SpList_daHK.asp
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK hy####view.co.kr
- DNS ASK ne####kbence.co.kr
- DNS ASK microsoft.com