Technical Information
Malicious functions:
Injects code into
the following system processes:
- <SYSTEM32>\winlogon.exe
Modifies file system :
Creates the following files:
- <SYSTEM32>\msctl32.dll