Техническая информация
- '%TEMP%\karpewen.exe'
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\icanhazip[1]
- %TEMP%\karpewen.exe
- '21#.#54.231.11':198
- '69.##3.81.211':198
- '75.##7.112.81':198
- '24.##.131.116':198
- '64.##3.121.6':198
- '72.##0.82.80':198
- '10#.#74.123.66':198
- '17#.#6.251.208':198
- '93.##.194.202':13241
- 'ic###azip.com':80
- '18#.#55.165.154':198
- '18#.#55.169.176':198
- '68.##0.246.142':198
- '17#.#16.240.56':198
- http://ic###azip.com/
- DNS ASK ic###azip.com