Technical Information
Malicious functions
Creates and executes the following (exploit)
- 'C:\users\public\downloads\test.exe'
Executes the following
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "C:\Users\Public\Downloads\test.exe" "test.exe" ENABLE
Modifies file system
Creates the following files
- C:\users\public\downloads\test.exe
Miscellaneous
Creates and executes the following
- 'C:\users\public\downloads\test.exe' ' (with hidden window)
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "C:\Users\Public\Downloads\test.exe" "test.exe" ENABLE' (with hidden window)
