Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '08424cfa267fc426d0a5c481eed43fd4' = '"%TEMP%\svchots.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '08424cfa267fc426d0a5c481eed43fd4' = '"%TEMP%\svchots.exe" ..'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\svchots.exe' = '%TEMP%\svchots.exe:*:Enabled:svchots.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\svchots.exe" "svchots.exe" ENABLE
- '%TEMP%\svchots.exe'
- %TEMP%\svchots.exe
- 'da#####bofhd.no-ip.biz':5336
- DNS ASK da#####bofhd.no-ip.biz