live casino online

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

���Բ��ٲ�������������

Infiltra los archivos siguientes:

• {Malware File Path}\TargetInfo.txt

Robo de informaci��n

Recopila los siguientes datos:

• Hostname
• Language
• IP Address
• Operating System
• CPU Architecture

Informaci��n sustra��da

Este malware env��a la informaci��n recopilada a la siguiente URL a trav��s de HTTP POST:

• http://{BLOCKED}.{BLOCKED}.{BLOCKED}.142/QWEwqdsvsf/ap.php

Otros detalles

Hace lo siguiente:

• It encrpyts disk image files with the following extension if the system name matches "vmkernel":
  • .vmdk
  • .vmem
  • .vswp
  • .vmsn
  • .vmx
  • .nvram
• It requires being executed with Administrative privileges to proceed with its routine.