The JPHP file cheats.exe[4] has the project name droper (sic). It accesses IceRat's main server to download the backdoor klient.exe[5]. It chooses randomly one of the following names from a list:
The JPHP file cheats.exe[4] has the project name droper (sic). It accesses IceRat's main server to download the backdoor klient.exe[5]. It chooses randomly one of the following names from a list: