Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Temp\temp11377.bat" "
Modifies file system:
Creates the following files:
- %WINDIR%\Temp\temp11377.bat
Deletes itself.