Technical Information
Malicious functions
Creates and executes the following
- '%TEMP%\s7054.exe'
Modifies file system
Creates the following files
- %TEMP%\s7054.exe
- nul
Miscellaneous
Executes the following
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 7200 > nul & del "%TEMP%\s7054.exe"
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 7200
- '%TEMP%\s7054.exe' ' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 7200 > nul & del "%TEMP%\s7054.exe"' (with hidden window)
