Техническая информация
- '<SYSTEM32>\schtasks.exe' /Create /SC MINUTE /MO 2 /TN doggo /F /tr %APPDATA%\VvYg\1.exe
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe'
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\VvYg\cSes.bat"
- <SYSTEM32>\dwwin.exe
- %APPDATA%\Monitor\Screenshots\04-12-2017\11.55 AM
- %APPDATA%\VvYg\cSes.bat
- %APPDATA%\VvYg\1.exe
- 'no######s.blockcha1n.info':8000
- DNS ASK no######s.blockcha1n.info