Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'MSSMSGS' = 'rundll32.exe wincjx32.rom,yipretYCDjb'
- iexplore.exe
- %TEMP%\ikt537c.tmp
- %WINDIR%\syswow64\wincjx32.rom
- %TEMP%\ikt537c.bat
- %TEMP%\ikt537c.tmp
- DNS ASK ob####fseher.net
- ClassName: 'IEFrame' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c "%TEMP%\IKT537C.bat"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c "%TEMP%\IKT537C.bat"