Technical Information
- %WINDIR%\tasks\lightmagic.job
- %ALLUSERSPROFILE%\application data\{ef54ff8f-8292-efda-ef54-4ff8f829fe3e}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{ef54ff8f-8292-efda-ef54-4ff8f829fe3e}\<File name>.dat
- DNS ASK fu###et.link
- DNS ASK al####el-pro.com
- DNS ASK ge####ltiple.link
- DNS ASK fu###set.link