Worm.Win32.AutoRun.qs
Named worm, pentest toolset
Sample from CN Honker Pentest Toolset - file LPK.DAT
SHA-2561bc925038e7fc4e91210f3c687392b8bf9e5a407117daefece84b3acfd988657
MaleculeTh
Evidence
⋯7 more rows
0x38486f776e6c6f6164546f46696c65410000ownloadToFileA..
0x3858633a5c312e657865000000006f70656ec:\1.exe....open
0x386800000000633a5c322e65786500000000....c:\2.exe....
⋯15 more rows