Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\cmd.exe' /c %TEMP%\30f16f1d391aa4ded3b34d4802cb365f.bat
Modifies file system :
Creates the following files:
- %TEMP%\30f16f1d391aa4ded3b34d4802cb365f.bat
Deletes itself.