Technical Information
- <SYSTEM32>\tasks\firefox default browser agent 39c4ced225e45ae9
- %WINDIR%\explorer.exe
- %APPDATA%\crarseb
- %APPDATA%\crarseb
- 'th###mmum.com':80
- http://th###mmum.com/upload/
- DNS ASK au###ney.com
- DNS ASK th###mmum.com
- DNS ASK at####pingtrips.com
- DNS ASK ku####ualaman.com
- DNS ASK re####zarazua.com
- DNS ASK na###mutlu.com
- '%APPDATA%\crarseb'
- '%APPDATA%\crarseb' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {D8DD553C-95F0-4F5D-B913-596CDCD79F2E} S-1-5-21-1960123792-2022915161-3775307078-1001:fzkylnbmhd\user:Interactive:[1]