Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run] 'ScreenMaster' = '<Full path to file> -h'
Creates or modifies the following files
- <SYSTEM32>\tasks\资讯热点-7
Modifies file system
Creates the following files
- <Current directory>\config.ini
Network activity
Connects to
- 'dx##.appzt.cn':80
- 'to#####.box.appzt.cn':80
- 'bo##.appzt.cn':80
- 'ap#.##xad.appzt.cn':80
- 'mi#####e.51duokai.com':80
- 'kl.#ppzt.cn':80
TCP
HTTP GET requests
- http://dx##.appzt.cn/dxshot/qycuu.ini
- http://mi#####e.51duokai.com/cgi/STWindowPopConfiguration.ashx/videodesktop/getlist
UDP
- DNS ASK op###.vx188.com.cn
- DNS ASK dx##.appzt.cn
- DNS ASK to#####.box.appzt.cn
- DNS ASK ba##u.com
- DNS ASK bo##.appzt.cn
- DNS ASK ap#.##xad.appzt.cn
- DNS ASK mi#####e.51duokai.com
- DNS ASK gg#####.boxad.appzt.cn
- DNS ASK kl.#ppzt.cn
