Technical Information
Modifies file system
Creates the following files
- %TEMP%\delays.tmp
Deletes itself.
Network activity
Connects to
- 't.#e':443
- 'st####ommunity.com':443
TCP
Other
- 't.#e':443
- 'st####ommunity.com':443
UDP
- DNS ASK t.#e
- DNS ASK st####ommunity.com
Miscellaneous
Restarts the analyzed sample
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c timeout /t 10 & del /f /q "<Full path to file>" & rd /s /q "%ALLUSERSPROFILE%\KJKJKFCBKKJD" & exit
- '%WINDIR%\syswow64\timeout.exe' /t 10
- '%WINDIR%\syswow64\cmd.exe' /c timeout /t 10 & del /f /q "<Full path to file>" & rd /s /q "%ALLUSERSPROFILE%\KJKJKFCBKKJD" & exit' (with hidden window)
