Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6IDMCOMZ2W' = '"%APPDATA%\<File name>.vbs"'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.vbs
- %APPDATA%\<File name>.vbs
- '17###3.ddns.net':47
- http://17####.ddns.net:47/Vre via 17###3.ddns.net
- DNS ASK 17###3.ddns.net