Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'QtQIXt' = '%ALLUSERSPROFILE%\erZxlClhUu5U\hrxmGplz5F5v\o6uxs6S4hbIdlr\AGRpTSbpxP7kYC\QbpYxUQtkA9s\l8Ffpc5xDW5i\WbfyNR.exe'
- %ALLUSERSPROFILE%\erZxlClhUu5U\hrxmGplz5F5v\o6uxs6S4hbIdlr\AGRpTSbpxP7kYC\QbpYxUQtkA9s\l8Ffpc5xDW5i\WbfyNR.exe
- %ALLUSERSPROFILE%\erZxlClhUu5U\hrxmGplz5F5v\o6uxs6S4hbIdlr\AGRpTSbpxP7kYC\QbpYxUQtkA9s\l8Ffpc5xDW5i\WbfyNR.exe
- %ALLUSERSPROFILE%\88270c99ad172825a294c3e4179f1f4ac43cd6cd
- %ALLUSERSPROFILE%\erZxlClhUu5U\hrxmGplz5F5v\o6uxs6S4hbIdlr\AGRpTSbpxP7kYC\QbpYxUQtkA9s\l8Ffpc5xDW5i\WbfyNR.exe
- 'dl.##opbox.com':80
- dl.##opbox.com/u/74411887/test.txt
- dl.##opbox.com/u/57634671/test.txt
- dl.##opbox.com/u/24080239/test.txt
- DNS ASK www.ps###lo.co.cc
- DNS ASK b1#####4b6.publicvm.com
- DNS ASK ii##i.us.to
- DNS ASK dl.##opbox.com
- ClassName: 'Indicator' WindowName: ''