Техническая информация
- <SYSTEM32>\calc.exe
- <SYSTEM32>\calc.exe
- <SYSTEM32>\notepad.exe
- %APPDATA%\klspnediknsg\jomaemszcuxu.exe
- %TEMP%\aut1.tmp
- %TEMP%\cqatino
- %TEMP%\LZMA.DLL
- %APPDATA%\klspnediknsg\jomaemszcuxu.exe
- %TEMP%\aut1.tmp
- %TEMP%\cqatino
- '<Полный путь к файлу>'
- '<SYSTEM32>\schtasks.exe' /create /tn 74726F7569767A676A6B6667 /tr "%APPDATA%\klspnediknsg\jomaemszcuxu.exe" /sc minute /mo 1 /F
- '<SYSTEM32>\calc.exe' -o pooleu.xmrminingpool.net:2222 -u 4BrL51JCc9NGQ71kWhnYoDRffsDZy7m1HUU7MRU4nUMXAHNFBEJhkTZV9HdaL4gfuNBxLPc3BeMkLGaPbF5vWtANQtz7XNvpsygAzF9g1Y -p NativeTestCpu -k --max-cpu-usage=75
- '<SYSTEM32>\notepad.exe' -o pooleu.xmrminingpool.net:2222 -u 4BrL51JCc9NGQ71kWhnYoDRffsDZy7m1HUU7MRU4nUMXAHNFBEJhkTZV9HdaL4gfuNBxLPc3BeMkLGaPbF5vWtANQtz7XNvpsygAzF9g1Y -p NativeTestCpuINACTIVO -k --max-cpu-usage=50
- '<SYSTEM32>\calc.exe' -o pooleu.xmrminingpool.net:2222 -u 4BrL51JCc9NGQ71kWhnYoDRffsDZy7m1HUU7MRU4nUMXAHNFBEJhkTZV9HdaL4gfuNBxLPc3BeMkLGaPbF5vWtANQtz7XNvpsygAzF9g1Y -p NativeTestCpu -k --max-cpu-usage=50