Technical Information
- '<SYSTEM32>\attrib.exe' +s +h "%TEMP%\scvhost.exe"
- '<SYSTEM32>\ping.exe' localhost -n 5
- '<SYSTEM32>\ping.exe' localhost -n 3
- '<SYSTEM32>\cmd.exe' /c attrib +s +h "%TEMP%\scvhost.exe"
- '<SYSTEM32>\cmd.exe' /c ping localhost -n 3 >nul & del "<Full path to file>" & ping localhost -n 5 >nul & "%TEMP%\scvhost.exe"
- %TEMP%\scvhost.exe
- %TEMP%\scvhost.exe