Technical Information
- <SYSTEM32>\logonui.exe /status /shutdown
- <SYSTEM32>\attrib.exe -r -s -h "<Full path to virus>"
- <SYSTEM32>\cmd.exe /c ""<Current directory>\145343.bat" "<Full path to virus>""
- <Current directory>\145343.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'StatusWindowClass' WindowName: ''