Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'DOK0DDU2VF' = '"%TEMP%\<File name>.js"'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.js
- %TEMP%\<File name>.js
- 'vj#####er.duckdns.org':9987
- http://vj######r.duckdns.org:9987/Vre via vj#####er.duckdns.org
- DNS ASK vj#####er.duckdns.org