Technical Information
Malicious functions:
Executes the following:
- <SYSTEM32>\cmd.exe /c <SYSTEM32>\KB1815552.bat
Modifies file system :
Creates the following files:
- <SYSTEM32>\newarea.dll
- <SYSTEM32>\KB1815552.bat
- <SYSTEM32>\KB1815552.inf
Deletes the following files:
- <SYSTEM32>\KB1815552.bat
- <SYSTEM32>\KB1815552.inf
Deletes itself.