It doesn't sound like particulary clever malware to me. It sends a filename to some logging service, then opens the windows hosts file and adds some lines to it. And it's only run because the downloader thinks it's some pirated software or keygen.

Not to say there aren't some folks wasting time on more clever malware.