Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- <SYSTEM32>\tasks\update controller ver4.51
Modifies file system
Creates the following files
- %TEMP%\788086f6-8ca0-4e47-8d8a-507c7b3c79ad\agiledotnetrt64.dll
- %APPDATA%\microsoft shared ver6.64\microsoftshared.exe
- %TEMP%\24a507136154d31cb81d
- %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\<File name>.exe.log
- %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\microsoftshared.exe.log
Sets the 'hidden' attribute to the following files
- %APPDATA%\microsoft shared ver6.64\microsoftshared.exe
- %TEMP%\24a507136154d31cb81d
Network activity
UDP
- DNS ASK sh####062.b.had.su
Miscellaneous
Creates and executes the following
- '%APPDATA%\microsoft shared ver6.64\microsoftshared.exe'
- '%APPDATA%\microsoft shared ver6.64\microsoftshared.exe' /f
Executes the following
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "Update Controller ver4.51" /tr "'%APPDATA%\Microsoft Shared ver6.64\MicrosoftShared.exe"'/f
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "Update Controller ver4.51" /tr "'%APPDATA%\Microsoft Shared ver6.64\MicrosoftShared.exe"'/f' (with hidden window)
