Technical Information
- %WINDIR%\tasks\lkqx.job
- <SYSTEM32>\tasks\lkqx
- %ALLUSERSPROFILE%\jsajpwj\lkqx.exe
- '17#.#5.193.9':443
- 'ap#.#pify.org':443
- DNS ASK pz####dvert475.xyz
- DNS ASK pz####erv275.xyz
- DNS ASK ap#.#pify.org
- '%ALLUSERSPROFILE%\jsajpwj\lkqx.exe' start
- '%ALLUSERSPROFILE%\jsajpwj\lkqx.exe' start' (with hidden window)