Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- %APPDATA%\Microsoft\windows\Start Menu\programs\startup\9frmqzjvi.lnk
Modifies file system
Creates the following files
- %ProgramFiles%\ivjzqmrf9.cpp
- %ProgramFiles%\9frmqzjvi.fee
Network activity
Connects to
- '19#.#89.105.124':80
- '5.##.81.116':443
- '19#.#89.105.124':443
TCP
Other
- '5.##.81.116':443
Miscellaneous
Executes the following
- '%WINDIR%\syswow64\rundll32.exe' C:\PROGRA~3\ivjzqmrf9.cpp,XXS1
