Technical Information
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$I58AFF310
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- from <Full path to virus> to C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$R58AFF310
- '20#.#8.32.176':80
- 'j.###mind.com':80
- 20#.#8.32.176/count.php?pa################################
- j.###mind.com/app/geoip.js
- DNS ASK "9#��x
- DNS ASK "9#|o
- DNS ASK "9#]
- DNS ASK "9#7���
- DNS ASK "9#�%�
- DNS ASK "9#��n�
- DNS ASK j.###mind.com
- DNS ASK "9#TPs
- DNS ASK "9#��[�
- DNS ASK "9#%3
- '18#.#0.162.7':16464
- '85.#6.107.4':16464
- '21#.#9.50.242':16464
- '17#.44.26.3':16464
- '75.##.212.246':16464
- '11#.#51.199.250':16464
- '18#.#9.115.241':16464
- '98.#29.18.9':16464
- '22#.#37.154.240':16464
- '58.#7.248.2':16464
- '12#.#54.80.251':16464
- '24.#.29.253':16464
- '10#.#86.62.248':16464
- '50.##.148.252':16464
- '69.##3.146.208':16464
- '18#.#1.50.109':16464
- '68.#.92.186':16464
- '50.##5.86.29':16464
- '68.##6.223.113':16464
- '24.##1.81.20':16464
- '86.##1.135.15':16464
- '80.##1.139.44':16464
- '76.##.176.22':16464
- '15#.#24.230.49':16464
- '75.##2.124.43':16464
- '94.##0.190.26':16464
- '96.##.223.209':16464
- '24.##9.205.174':16464
- '79.#6.233.5':16464
- '24.#3.83.18':16464
- '68.##7.71.12':16464
- '75.##9.85.252':16464
- '65.##9.1.242':16464
- '20#.#34.191.251':16464
- '49.#59.53.8':16464
- '88.##4.121.10':16464
- '98.##8.40.247':16464
- '89.##4.50.17':16464
- '21#.#06.173.249':16464
- '18#.#1.76.248':16464
- '17#.31.9.3':16464
- '18#.#6.70.11':16464
- '18#.44.0.57':16464
- '75.##6.33.56':16464
- '11#.#8.249.55':16464
- '10#.8.16.29':16464
- '75.#81.6.5':16464
- '18#.#61.47.252':16464
- '11#.#4.178.46':16464
- '76.#7.32.6':16464
- '88.##5.218.22':16464
- '98.##1.248.23':16464
- '24.##3.7.251':16464
- '71.##.248.55':16464
- '74.##5.156.24':16464
- '17#.#13.50.7':16464
- '92.##8.15.41':16464
- '24.##.16.240':16464
- '68.##4.168.182':16464
- '78.##2.16.111':16464
- '17#.#7.151.253':16464
- '12#.#.163.248':16464
- '17#.#3.4.242':16464
- '86.##1.175.247':16464
- '75.##1.209.238':16464
- '77.##8.227.171':16464
- '5.##.161.92':16464
- '17#.#61.9.242':16464
- '18#.#.235.109':16464
- '20#.#63.216.124':16464
- '11#.#11.219.137':16464
- '17#.#0.63.254':16464
- '21#.#5.2.246':16464
- '71.#.208.243':16464
- '18#.#2.162.2':16464
- '95.##6.80.173':16464
- '17#.#00.142.175':16464
- '18#.#8.189.178':16464
- '71.##.242.254':16464
- '82.##3.236.249':16464
- '76.##.28.251':16464
- '69.##.219.238':16464
- '64.##.152.243':16464
- '85.##9.191.248':16464
- '24.##3.15.243':16464
- '1.###.146.80':16464
- '31.#.180.52':16464
- '63.##4.173.78':16464
- '89.#2.71.78':16464
- '19#.#13.141.92':16464
- '18#.#4.149.89':16464
- '85.##2.147.74':16464
- '59.##3.122.6':16464
- '70.#8.77.4':16464
- '84.##3.120.2':16464
- '71.#0.75.6':16464
- '50.##4.145.3':16464
- '67.##9.223.5':16464
- '18#.#71.30.3':16464
- '71.##.151.10':16464
- '88.##4.69.65':16464
- '18#.#90.133.130':16464
- '96.##.113.40':16464
- '74.##.181.249':16464
- '97.##2.47.212':16464
- '82.##.168.193':16464
- '19#.#6.74.95':16464
- '79.#9.72.73':16464
- '98.##1.173.73':16464
- '14.##.248.99':16464
- '67.##.119.70':16464
- '1.###.176.104':16464
- '69.##6.29.43':16464
- '19#.#7.191.29':16464
- '10#.#25.15.20':16464
- '67.##.177.115':16464
- '98.##7.236.37':16464
- '21#.#0.239.194':16464
- '12#.#10.153.72':16464
- '37.##0.252.193':16464
- '24.##0.137.196':16464
- '11#.#54.113.158':16464
- '67.##9.162.249':16464
- '17#.#5.239.203':16464
- '68.##.78.179':16464
- '75.##.37.115':16464
- '19#.#44.2.176':16464
- '98.##4.128.60':16464
- '21#.#00.135.152':16464
- '21#.#14.222.46':16464
- '68.##7.95.21':16464
- '17#.#02.109.156':16464
- '71.##8.199.86':16464
- '19#.#5.104.158':16464
- '68.##.233.17':16464
- '76.##1.210.172':16464
- '24.##2.181.179':16464
- '18#.#65.145.137':16464
- '18#.#8.158.147':16464
- '95.##3.152.142':16464
- '77.##8.235.168':16464
- '12#.#01.247.152':16464
- '93.##5.101.55':16464
- '88.##4.253.254':16464
- '20#.#7.73.159':16464
- '18#.#9.56.132':16464
- '17#.#8.45.160':16464
- '11#.#4.188.69':16464
- '11#.#54.253.254':16464
- '20#.#54.253.254':16464
- '13#.#54.253.254':16464
- '19#.#54.253.254':16464
- '92.##4.253.254':16464
- '16#.#54.253.254':16464
- '18#.#54.253.254':16464
- '93.##.122.183':16464
- '21#.#16.51.86':16464
- '2.###.237.57':16464
- '17#.#1.49.42':16464
- '24.##7.49.94':16464
- '11#.#40.134.5':16464
- '98.##6.129.93':16464
- '21#.#20.65.162':16464
- '17#.#.149.128':16464
- '83.##7.21.162':16464
- '17#.#6.153.121':16464
- '67.##1.128.173':16464
- '12#.#4.95.102':16464
- '21#.#4.93.172':16464
- '96.##.26.153':16464
- '12#.#66.233.37':16464
- '19#.#07.206.254':16464
- '18#.#6.197.3':16464
- '58.##6.115.43':16464
- '11#.#1.247.248':16464
- '21#.#34.228.41':16464
- '69.##4.102.36':16464
- '17#.#66.162.35':16464
- '18#.#4.187.24':16464
- '74.#9.67.22':16464
- '18#.#70.44.63':16464
- '20#.#15.191.19':16464
- '24.#50.4.56':16464
- '72.##3.24.60':16464
- '11#.#6.104.244':16464
- '96.##.140.252':16464
- '12#.#31.66.15':16464
- '18#.#85.175.244':16464
- '94.##7.191.247':16464
- '24.##6.230.247':16464
- '1.###.195.244':16464
- '95.##8.129.61':16464
- '22#.#36.5.247':16464
- '74.##.177.248':16464
- '71.#8.144.5':16464
- '20#.#4.248.240':16464
- '11#.#48.236.240':16464
- '87.##.140.249':16464
- '20#.#2.231.163':16464
- '24.##6.159.14':16464
- '19#.#18.169.40':16464
- '67.##.149.141':16464
- '88.#.225.248':16464
- '98.##7.236.248':16464
- '68.##3.33.253':16464
- '69.##2.211.179':16464
- '37.##3.23.148':16464
- '85.##.228.108':16464
- '87.##.240.222':16464
- '24.##2.56.163':16464
- '17#.#3.12.75':16464
- '68.##7.80.115':16464
- '69.##4.207.34':16464
- '21#.#7.143.46':16464
- '37.##3.154.33':16464
- '68.#.47.49':16464
- '19#.#8.227.19':16464
- '24.##7.102.37':16464
- '99.##7.152.38':16464
- '86.##6.118.43':16464
- '15#.#8.146.32':16464
- '10#.#20.79.13':16464
- '75.##0.221.11':16464
- '11#.#69.243.6':16464
- '14.##8.161.20':16464
- '75.##2.191.11':16464