Техническая информация
- '<SYSTEM32>\net1.exe' user Guest cruelsister
- '<SYSTEM32>\shutdown.exe' /s /f /t 06 /c "Hi! If you are reading this your computer is about to be infected. Shutdown will commence now"
- '<SYSTEM32>\attrib.exe' +h %TEMP%\ztmp
- '<SYSTEM32>\net1.exe' user %USERNAME% cruelsister
- %TEMP%\ztmp\tmp43531.exe
- %TEMP%\ztmp\tmp43001.bat
- %TEMP%\ztmp\tmp43531.exe