Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<File name>' = '"<Full path to file>"'
Creates or modifies the following files:
- %HOMEPATH%\Start Menu\Programs\Startup\<File name>.exe
Modifies file system:
Creates the following files:
- C:\jre1.9.1_000\Java Update.exe
Deletes the following files:
- <Full path to file>
Network activity:
Connects to:
- '19#.#54.226.19':2
Miscellaneous:
Creates and executes the following:
- 'C:\jre1.9.1_000\Java Update.exe'
Executes the following:
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 3
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 3 > Nul & Del "<Full path to file>"&"c:\jre1.9.1_000\Java Update.exe"
