Technical Information
Malicious functions:
Executes the following:
- <SYSTEM32>\attrib.exe -s -h -a "<Full path to virus>"
- <SYSTEM32>\cmd.exe /c ""<Full path to virus>.bat""
Modifies file system :
Creates the following files:
- <Full path to virus>.bat
- %TEMP%\SH1.tmp
Deletes itself.
