Technical Information
- [<HKCU>\software\microsoft\windows\currentversion\run] 'Name' = '%TEMP%\<File name>.exe'
- %TEMP%\<File name>.exe
- %TEMP%\<File name>.exe
- '<LOCALNET>.1.105':4444
- http://dp##te.com/27ED8GF.txt
- DNS ASK dp##te.com
- '%TEMP%\<File name>.exe'