Technical Information
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 1
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 1 && del /f/q "<Full path to file>"
- '<SYSTEM32>\rundll32.exe' "%TEMP%\132265.dll",MainThread
- %TEMP%\132265.dll
- from <Full path to file> to <SYSTEM32>\132390.bak