Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Graphics' = '"%CommonProgramFiles%\Initech\Initech.exe" /run'
Modifies file system:
Creates the following files:
- %CommonProgramFiles%\Initech\Initech.exe
Deletes the following files:
- <Full path to file>
Network activity:
Connects to:
- '16#.#94.123.67':8008
Miscellaneous:
Creates and executes the following:
- '%CommonProgramFiles%\Initech\Initech.exe' /run
Executes the following:
- '<SYSTEM32>\cmd.exe' /c del /q "<Full path to file>" >> NUL
