live casino online

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

?bertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

Schleust die folgenden Dateien ein:

• {Malware File Path}\TargetInfo.txt

Datendiebstahl

Folgende Daten werden gesammelt:

• Hostname
• Language
• IP Address
• Operating System
• CPU Architecture

Entwendete Daten

Sendet die gesammelten Daten ��ber HTTP-POST an den folgenden URL:

• http://{BLOCKED}.{BLOCKED}.{BLOCKED}.142/QWEwqdsvsf/ap.php

Andere Details

Es macht Folgendes:

• It encrpyts disk image files with the following extension if the system name matches "vmkernel":
  • .vmdk
  • .vmem
  • .vswp
  • .vmsn
  • .vmx
  • .nvram
• It requires being executed with Administrative privileges to proceed with its routine.