Technical Information
Malicious functions
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
- Windows Update
- Windows Defender
Modifies file system
Creates the following files
- %TEMP%\ixp000.tmp\axmf.exe
- %TEMP%\ixp000.tmp\nika.exe
Deletes the following files
- %TEMP%\ixp000.tmp\nika.exe
- %TEMP%\ixp000.tmp\axmf.exe
Miscellaneous
Creates and executes the following
- '%TEMP%\ixp000.tmp\axmf.exe'
- '%TEMP%\ixp000.tmp\nika.exe'
Executes the following
- '%TEMP%\ixp000.tmp\axmf.exe' ' (with hidden window)
- '%TEMP%\ixp000.tmp\nika.exe' ' (with hidden window)
