Technical Information
Modifies file system
Creates the following files
- %TEMP%\svchost.exe
- %TEMP%\melt.bat
- nul
Deletes itself.
Network activity
TCP
Other
- '34.##9.100.209':443
Miscellaneous
Creates and executes the following
- '%TEMP%\svchost.exe'
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\Melt.bat" -s"
- '%WINDIR%\syswow64\ping.exe' ; 1.2; 0.3; 0.4 - n; 1 - w; 500
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\Melt.bat" -s"' (with hidden window)
