Technical Information
- <Current directory>\tkcgquhwcauzusxr.exe
- %TEMP%\17a0f543-f1d1-41d5-9357-f68183a5d9f0.bat
- %TEMP%\17a0f543-f1d1-41d5-9357-f68183a5d9f0.bat
- DNS ASK au##.#eprimere.shop
- DNS ASK au##.#nknownp.one
- '<Current directory>\tkcgquhwcauzusxr.exe' 1
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\17a0f543-f1d1-41d5-9357-f68183a5d9f0.bat""
- '<SYSTEM32>\timeout.exe' /T 1
- '<SYSTEM32>\attrib.exe' -r -s -h "<Full path to file>"
- '<SYSTEM32>\attrib.exe' -r -s -h "%TEMP%\17a0f543-f1d1-41d5-9357-f68183a5d9f0.bat"