Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = ' msnepsch.dll'
Modifies file system :
Creates the following files:
- <SYSTEM32>\jscrmsts.dll
- <SYSTEM32>\ocmakbdk.dat
- <SYSTEM32>\msnepsch.dll
- <SYSTEM32>\filemsjt.exe
Network activity:
Connects to:
- '67.##5.160.76':25
UDP:
- DNS ASK ma##.yahoo.com
- DNS ASK ya##o.com