When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Once that’s done, themalwaredrops XMRig, one of the most popular cryptocurrency miners out there.
This file drops a powerShell script called GhostEngine which, in turn, runs a number of different activities.
GhostEngine can also disable Windows Defender, enable remote services, and clear different Windows event logs.
ViaBleepingComputer
