Техническая информация
- svchosst.exe
- %TEMP%\svchosst.exe
- %APPDATA%\remcos\logs.dat
- %APPDATA%\FEORJUD\FEORJUD.exe
- %APPDATA%\FEORJUD\aWWWWW.xml
- %APPDATA%\FEORJUD\aWWWWW.xml
- '87###p.ddns.net':1078
- DNS ASK 87###p.ddns.net
- '%TEMP%\svchosst.exe'
- '<SYSTEM32>\schtasks.exe' /Create /TN "FEORJUD\FEORJUD" /XML "%APPDATA%\FEORJUD\aWWWW#.xml"