Technical Information
Malicious functions:
Executes the following:
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\Temp\temp15962.bat" "
Modifies file system :
Creates the following files:
- %WINDIR%\Temp\temp15962.bat
Deletes itself.