Technical Information
- [<HKLM>\System\CurrentControlSet\Services\VBoxDrv] 'ImagePath' = '<DRIVERS>\VBoxDrv.sys'
- <Current directory>\ckwbsmif1x.exe
- <Current directory>\ckwbsmif1xqrzwo.exe
- <Current directory>\imagesmode.sys
- <Current directory>\jxgnc.sys
- <DRIVERS>\vboxdrv.sys
- nul
- <Current directory>\ckwbsmif1x.exe
- <Current directory>\imagesmode.sys
- <Current directory>\jxgnc.sys
- '<Current directory>\ckwbsmif1xqrzwo.exe' CkWBsmIf1Xqrzwo
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "<Full path to file>"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 3000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "<Current directory>\JxGNc.sys"