Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- %APPDATA%\microsoft\windows\start menu\programs\startup\exe.lnk
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\clr_v4.0_32\usagelogs\<File name>.exe.log
- nul
- %APPDATA%\exe.exe
Miscellaneous
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 46 > nul && copy "<Full path to file>" "%APPDATA%\exe.exe" && ping 127.0.0.1 -n 46 > nul && "%APPDATA%\exe.exe"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 46
