Technical Information
Modifies file system
Creates the following files
- D:\cconter.exe
Sets the 'hidden' attribute to the following files
- D:\cconter.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- 'D:\cconter.exe'
- 'D:\cconter.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' cmd /c del <File name>.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1&&del <File name>.exe' (with hidden window)
Executes the following
- '%WINDIR%\syswow64\cmd.exe' cmd /c del <File name>.exe
- '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1&&del <File name>.exe
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1
