Техническая информация
- scOOKScliesnttex.exe
- %TEMP%\chachanoteeebila.txt
- %TEMP%\scOOKScliesnttex.txt
- %HOMEPATH%\Desktop\scOOKScliesnttex.exe
- '%HOMEPATH%\Desktop\scOOKScliesnttex.exe'
- '<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "chachanoteeebila" /d "cmd /c type "%TEMP%\chachanoteeebila.txt" | cmd"
- '<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "scOOKScliesnttex" /d "cmd /c type "%TEMP%\scOOKScliesnttex.txt" | cmd"
- '<SYSTEM32>\cmd.exe'