Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- '%APPDATA%\KB01321295.exe'
- '%APPDATA%\KB01321295.exe'
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\exp1.tmp.bat"
- <SYSTEM32>\cmd.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '18#.#35.150.72':8080
- '19#.#19.206.66':8080
- '74.##7.58.80':8080
- '12#.#9.61.59':8080
- '20#.#43.189.180':8080
- '84.##.100.108':8080
- '18#.#37.17.180':8080
- '69.#4.89.82':8080
- '64.##0.187.72':8080
- '19#.#11.72.46':8080
- '20#.#17.147.52':8080
- '74.##7.59.55':8080
- '19#.#1.215.210':8080
- '41.##8.5.140':8080
- ClassName: 'Indicator' WindowName: ''