Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HESTEBR' = '%TEMP%\SKIVERU\BASSWOO.exe'
- ieinstal.exe
- %TEMP%\skiveru\basswoo.exe
- 'lo######inesslink.com.au':80
- DNS ASK lo######inesslink.com.au
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'