Technical Information
Malicious functions
Reads files which store third party applications passwords
- %LOCALAPPDATA%\google\chrome\user data\default\web data
Modifies file system
Creates the following files
- %TEMP%\service.exe
- %APPDATA%\configurable_injector.exe
- %APPDATA%\chrtmp
Miscellaneous
Creates and executes the following
- '%TEMP%\service.exe'
- '%APPDATA%\configurable_injector.exe'