The Kaspersky report details the technical aspects of THE DUQU 2.0 malware. The initial attack involves a MSI package, with file properties including ActionDLL (msi.dll), ActionData0, and klif.dll. The malware attacks AVP.EXE and uses CTwoPENC.dll and KMART.dll as zero-day and KMART.dll, respectively.
