Technical Information
Modifies file system
Creates the following files
- %WINDIR%\5lvd.exe
- %TEMP%\content\2308-980-5lvd.exe-10-00-03-321.dump
Moves the following files
- from %WINDIR%\5lvd.exe to %TEMP%\928156\....\temporaryfile
Network activity
Connects to
- '96##zhu.com':443
- 'x1.#.lencr.org':80
- '80.##0.113.62':80
TCP
HTTP GET requests
- http://x1.#.lencr.org/
Other
- '96##zhu.com':443
UDP
- DNS ASK 96##zhu.com
- DNS ASK x1.#.lencr.org
Miscellaneous
Creates and executes the following
- '%WINDIR%\5lvd.exe'
