Re: Military crypter tomjose (fud)
Coding Language: Delphi ??
No assembler code ?!
here is some analysis
* Creates process "null, C:\Users\*****\AppData\Local\Temp\mmTemp.bat, C:\Users\*****\AppData\Local\Temp".
* Injects code into process "C:\Windows\System32\cmd.exe".
* Creates process "C:\Windows\System32\PING.EXE, ping -n 0 127.0.0.1 , C:\Users\*****\AppData\Local\Temp".
* Injects code into process "C:\Windows\System32\PING.EXE".
* Creates process "C:\Windows\System32\taskkill.exe, taskkill /f /im "military crypter tomjose.exe", C:\Users\*****\AppData\Local\Temp".
* Injects code into process "C:\Windows\System32\taskkill.exe".
Moving to analysis zone till it clears up !!