Technical Information
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$I58AFF310
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- from <Full path to virus> to C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$R58AFF310
- '20#.#8.32.176':80
- 'j.###mind.com':80
- 20#.#8.32.176/count.php?pa################################
- j.###mind.com/app/geoip.js
- DNS ASK pz#���
- DNS ASK pz#1��7
- DNS ASK pz#(��
- DNS ASK pz#<U
- DNS ASK pz#��=_
- DNS ASK pz#�e��
- DNS ASK j.###mind.com
- DNS ASK pz#g�
- DNS ASK pz#�<�
- DNS ASK pz#7��B
- '62.##8.226.196':16464
- '98.##3.22.44':16464
- '18#.#93.142.196':16464
- '10#.#.228.45':16464
- '1.##3.24.93':16464
- '82.##6.38.94':16464
- '24.#.132.197':16464
- '70.##.13.101':16464
- '18#.#7.71.193':16464
- '18#.#3.250.35':16464
- '74.##3.6.195':16464
- '4.##.30.10':16464
- '19#.#04.69.98':16464
- '1.###.248.98':16464
- '18#.#27.14.212':16464
- '19#.#79.108.211':16464
- '72.##1.113.206':16464
- '18#.#15.73.82':16464
- '20#.#0.220.59':16464
- '18#.#65.121.214':16464
- '98.##8.208.81':16464
- '10#.#3.215.88':16464
- '78.##6.244.49':16464
- '11#.#48.180.48':16464
- '11#.#40.67.8':16464
- '12#.#6.175.7':16464
- '20#.#27.74.202':16464
- '21#.#9.36.200':16464
- '21#.#66.247.129':16464
- '24.##.232.130':16464
- '65.#.221.131':16464
- '81.##3.204.14':16464
- '18#.#8.11.122':16464
- '20#.#08.78.122':16464
- '74.##3.142.172':16464
- '66.##1.59.27':16464
- '20#.#72.205.139':16464
- '11#.#84.123.165':16464
- '17#.#1.85.137':16464
- '18#.#4.164.31':16464
- '67.##8.184.165':16464
- '76.##4.126.165':16464
- '17#.#69.116.35':16464
- '79.##4.25.35':16464
- '71.##.84.110':16464
- '10#.#70.53.186':16464
- '15#.#24.167.102':16464
- '68.##4.148.192':16464
- '68.#2.43.10':16464
- '76.##.237.115':16464
- '18#.#37.149.175':16464
- '18#.#8.181.121':16464
- '72.##.213.177':16464
- '20#.#01.75.111':16464
- '5.##.81.112':16464
- '74.##2.164.185':16464
- '77.##2.69.215':16464
- '71.##0.10.33':16464
- '94.##9.211.117':16464
- '59.##2.230.115':16464
- '2.###.202.129':16464
- '10#.#04.3.138':16464
- '12.##.68.135':16464
- '21#.#7.17.133':16464
- '92.##9.175.101':16464
- '24.##5.244.100':16464
- '10#.#.123.39':16464
- '11#.#93.68.36':16464
- '85.##.217.108':16464
- '12#.#10.161.108':16464
- '71.##.68.102':16464
- '98.##1.158.17':16464
- '99.##4.44.18':16464
- '12#.#04.174.146':16464
- '75.##.95.148':16464
- '94.##7.242.166':16464
- '19#.#72.171.159':16464
- '36.##4.8.156':16464
- '70.##6.191.25':16464
- '11#.#97.0.141':16464
- '50.##9.160.26':16464
- '2.###.52.143':16464
- '97.##.144.145':16464
- '98.##5.77.145':16464
- '89.#4.99.20':16464
- '75.##6.188.254':16464
- '95.##7.160.64':16464
- '71.##8.170.253':16464
- '49.##7.66.64':16464
- '89.##.234.59':16464
- '65.#.67.62':16464
- '24.##.61.164':16464
- '61.##9.233.4':16464
- '12#.#18.13.234':16464
- '11#.#32.254.218':16464
- '12#.#36.69.245':16464
- '20#.#01.107.253':16464
- '62.##.111.250':16464
- '91.##.168.248':16464
- '11#.#95.25.48':16464
- '18#.#37.180.91':16464
- '1.###.214.90':16464
- '98.##2.174.94':16464
- '17#.89.5.97':16464
- '50.##.203.95':16464
- '68.##3.127.95':16464
- '24.##3.52.81':16464
- '92.##3.19.79':16464
- '85.#6.79.2':16464
- '66.##5.122.83':16464
- '24.#0.86.87':16464
- '85.##.199.86':16464
- '15#.#4.94.85':16464
- '12#.#41.198.221':16464
- '11#.161.0.6':16464
- '79.#3.203.5':16464
- '77.##.150.221':16464
- '88.##8.11.79':16464
- '14#.#17.31.216':16464
- '17#.#8.199.75':16464
- '20#.#8.114.73':16464
- '95.##.210.72':16464
- '19#.#5.24.237':16464
- '17#.#23.243.4':16464
- '10#.#5.55.232':16464
- '94.##1.166.5':16464
- '71.##9.135.5':16464
- '31.##6.189.86':16464
- '14#.#69.50.205':16464
- '19#.#91.218.51':16464
- '20#.#7.114.51':16464
- '71.##0.104.8':16464
- '1.##8.71.50':16464
- '61.#4.18.87':16464
- '24.##4.168.53':16464
- '18#.#.171.213':16464
- '82.##3.176.55':16464
- '11#.#69.80.85':16464
- '89.##.182.206':16464
- '12#.#76.166.7':16464
- '24.#34.99.7':16464
- '15#.#0.16.254':16464
- '83.##0.158.64':16464
- '88.##4.253.254':16464
- '17#.#.234.64':16464
- '21#.#13.213.251':16464
- '85.##8.137.67':16464
- '2.##.145.253':16464
- '18#.#54.253.254':16464
- '19#.#54.253.254':16464
- '20#.#54.253.254':16464
- '16#.#54.253.254':16464
- '92.##4.253.254':16464
- '11#.#54.253.254':16464
- '13#.#54.253.254':16464
- '75.#36.6.72':16464
- '61.##8.2.246':16464
- '18#.#0.65.247':16464
- '19#.#47.33.245':16464
- '11#.#77.41.238':16464
- '11#.#54.175.238':16464
- '17#.#00.136.243':16464
- '12.##2.118.250':16464
- '76.##.28.251':16464
- '97.##.90.251':16464
- '18#.#1.201.68':16464
- '11#.#41.241.68':16464
- '13#.#04.40.249':16464
- '98.##4.226.249':16464
- '11#.#3.156.47':16464
- '24.##1.106.16':16464
- '11#.#19.146.160':16464
- '20#.#27.35.161':16464
- '49.##7.198.18':16464
- '98.#0.55.18':16464
- '72.##6.106.146':16464
- '62.##.65.159':16464
- '11#.#8.48.63':16464
- '31.##6.253.25':16464
- '92.##9.21.29':16464
- '78.##.223.163':16464
- '11#.#69.13.19':16464
- '76.##.40.144':16464
- '24.##.239.24':16464
- '1.###.108.159':16464
- '17#.#09.79.158':16464
- '75.##.97.156':16464
- '59.##2.180.161':16464
- '2.###.102.163':16464
- '71.#9.0.162':16464
- '11#.#41.179.144':16464
- '17#.#57.143.151':16464
- '78.#.114.17':16464
- '10#.#3.253.16':16464
- '67.##3.45.153':16464
- '19#.#04.233.154':16464
- '12#.#96.156.149':16464
- '1.###.149.153':16464
- '46.##8.71.188':16464
- '85.#55.4.11':16464
- '83.##0.239.190':16464
- '84.##.82.187':16464
- '21#.#64.132.184':16464
- '19#.#52.80.114':16464
- '12#.#24.40.107':16464
- '46.##.192.97':16464
- '58.##.145.97':16464
- '68.##8.50.45':16464
- '68.#4.1.39':16464
- '15#.#2.231.106':16464
- '14#.#0.104.105':16464
- '18#.#40.17.37':16464
- '17#.#.182.171':16464
- '24.#0.6.126':16464
- '17#.#1.151.14':16464
- '18#.#7.223.32':16464
- '41.##2.38.134':16464
- '18#.#.177.15':16464
- '49.##4.50.15':16464
- '64.##.251.33':16464
- '11#.#3.33.13':16464
- '19#.#4.118.180':16464
- '17#.#49.68.177':16464
- '20#.#7.41.14':16464
- '24.##5.82.33':16464
- '18#.#4.55.177':16464