Техническая информация
- '' (загружен из сети Интернет)
- %TEMP%\OIBBe65b99mImsrop0nv.exe
- %TEMP%\apN1r5fc83.exe
- 'as####nloadgate.com':80
- 'wp#d':80
- http://as####nloadgate.com/get/4/remote.exe
- http://as####nloadgate.com/get/3/wizzcaster_v2.exe
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK as####nloadgate.com
- DNS ASK wp#d
- '%TEMP%\OIBBe65b99mImsrop0nv.exe'
- '%TEMP%\apN1r5fc83.exe' 57a764d042bf8
- '<SYSTEM32>\cmd.exe' /k "%TEMP%\\OIBBe65b99mImsrop0nv.exe" & exit
- '<SYSTEM32>\cmd.exe' /k "%TEMP%\\apN1r5fc83.exe" 57a764d042bf8 & exit