Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ify' = '%APPDATA%\Ify\Ify.exe'
- installutil.exe
- %TEMP%\5fe04141-d3b5-4927-8ee5-5a463e534407\njn.dll
- %TEMP%\installutil.exe
- %TEMP%\b35bc50e-fc56-4239-a7d0-bb79118b31c9\agiledotnetrt.dll
- %APPDATA%\ify\ify.exe
- %APPDATA%\ify\ify.exe
- 'se####wbatroun.com':443
- DNS ASK se####wbatroun.com
- '%TEMP%\installutil.exe'