Technical Information
Modifies file system
Creates the following files
- <Current directory>\flxwvullekjijvp.exe
- %TEMP%\fdebb805-c035-4d34-99df-26fb2c75fbd5.bat
Sets the 'hidden' attribute to the following files
- %TEMP%\fdebb805-c035-4d34-99df-26fb2c75fbd5.bat
Network activity
Connects to
- 'mo#####.map.fastly.net':443
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
UDP
- DNS ASK au##.#eprimere.shop
- DNS ASK au##.#nknownp.one
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
Miscellaneous
Creates and executes the following
- '<Current directory>\flxwvullekjijvp.exe' 1
Executes the following
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\fdebb805-c035-4d34-99df-26fb2c75fbd5.bat""
- '<SYSTEM32>\timeout.exe' /T 1
- '<SYSTEM32>\attrib.exe' -r -s -h "<Full path to file>"
- '<SYSTEM32>\attrib.exe' -r -s -h "%TEMP%\fdebb805-c035-4d34-99df-26fb2c75fbd5.bat"
