Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pqngRAQI\' = 'C:\pqngRAQI\mkzmPVgY.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- %APPDATA%\Imminent\Logs\19-09-2017
- C:\pqngRAQI\mkzmPVgY.exe
- 'rg####.#hickenkiller.com':1222
- DNS ASK rg####.#hickenkiller.com