Technical Information
To ensure autorun and distribution:
Creates the following files on removable media:
- <Drive name for removable media>:\Nueva carpeta.exe
Modifies file system :
Creates the following files:
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\foldcash.x10[1]
Network activity:
Connects to:
- 'fo###ash.x10.mx':80
- 'localhost':1037
TCP:
HTTP GET requests:
- fo###ash.x10.mx/
UDP:
- DNS ASK fo###ash.x10.mx
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
