Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft.exe
- %APPDATA%\Imminent\Monitoring\network.dat
- %APPDATA%\Imminent\Monitoring\system.dat
- %TEMP%\Microsoft.txt
- %APPDATA%\Imminent\Logs\07-12-2017
- '17#.#27.99.242':4331
- '%HOMEPATH%\Start Menu\Programs\Startup\Microsoft.exe'
- '<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Microsoft" /d "cmd /c type "%TEMP%\Microsoft.txt" | cmd"
- '<SYSTEM32>\cmd.exe'