Technical Information
Malicious functions
Injects code into
the following user processes:
- gc_000e943d09e4.exe
Modifies file system
Creates the following files
- %TEMP%\gc_000e943d09e4.exe
- nul
Deletes following files that it created itself
- %TEMP%\gc_000e943d09e4.exe
Miscellaneous
Creates and executes the following
- '%TEMP%\gc_000e943d09e4.exe' --g
- '%TEMP%\gc_000e943d09e4.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /c ping -n 4 127.0.0.1 >nul & del "%TEMP%\gc_000E943D09E4.exe"
- '<SYSTEM32>\ping.exe' -n 4 127.0.0.1
