Technical Information
Malicious functions:
Terminates or attempts to terminate
the following user processes:
- iexplore.exe
- chrome.exe
- firefox.exe
- safari.exe
- opera.exe
Modifies file system:
Deletes the following files:
- <Full path to file>
Miscellaneous:
Executes the following:
- '<SYSTEM32>\cmd.exe' /c Ping -n 2 127.0.0.1 && Del /F/Q "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /c ipconfig /release
- '<SYSTEM32>\ping.exe' -n 2 127.0.0.1
- '<SYSTEM32>\ipconfig.exe' /release
