Technical Information
- %TEMP%\fb20.tmp\malwar~1.bat
- <Current directory>\msg.vbs
- <Current directory>\msg.vbs
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\msg.vbs"
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\FB20.tmp\MALWAR~1.BAT""
- '%WINDIR%\syswow64\attrib.exe' +h msg.vbs