Техническая информация
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn Server /tr %HOMEPATH%\Local Settings\Temp/Server.exe
- '%WINDIR%\lsass.exe'
- %TEMP%\Server.exe
- %WINDIR%\lsass.exe
- %WINDIR%\lsass.exe
- 'in####.codns.com':1238
- DNS ASK in####.codns.com