Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe.lnk
- 'se##z.top':80
- '47.##2.142.148':9004
- http://www.se##z.top/dck/dck.txt
- http://47.###.142.148:9004/login via 47.##2.142.148
- DNS ASK ba##u.com
- DNS ASK se##z.top