Technical Information
- [<HKLM>\System\CurrentControlSet\Services\VBoxDrv] 'ImagePath' = '<DRIVERS>\VBoxDrv.sys'
- <Current directory>\cuanrpkc7q.exe
- <Current directory>\cuanrpkc7qpoh87.exe
- <Current directory>\imagesmode.sys
- <Current directory>\fgion.sys
- <DRIVERS>\vboxdrv.sys
- nul
- <Current directory>\cuanrpkc7q.exe
- <Current directory>\imagesmode.sys
- <Current directory>\fgion.sys
- '<Current directory>\cuanrpkc7qpoh87.exe' CuAnRPKC7QpoH87
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "<Full path to file>"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 3000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "<Current directory>\FGIOn.sys"