Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MO32R7826E' = '"%APPDATA%\<File name>.js"'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.js
- %APPDATA%\<File name>.js
- 'dn#####.publicvm.com':777
- DNS ASK dn#####.publicvm.com