Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\sad1.tmp
- %TEMP%\3f1febc7-6b35-447b-ab40-185508946cdd\config.dmc
Сетевая активность
TCP
Запросы HTTP GET
- http://st#####r.sslsecure1.com/test.html
- http://tr###.#2.sslsecure1.com/test.html
- http://tr###.#2.sslsecure2.com/test.html
- http://ap#.##.sslsecure1.com/test.html
- http://ap#.##.sslsecure2.com/test.html
- http://st#####r.sslsecure2.com/test.html
UDP
- DNS ASK ap#.##.secdls.com
- DNS ASK tr###.#2.sslsecure6.com
- DNS ASK tr###.#2.sslsecure7.com
- DNS ASK tr###.#2.sslsecure8.com
- DNS ASK tr###.#2.sslsecure9.com
- DNS ASK tr###.##.sslsecure10.com
- DNS ASK ap#.##.sslsecure1.com
- DNS ASK ap#.##.sslsecure3.com
- DNS ASK st#####r.sslsecure7.com
- DNS ASK ap#.##.sslsecure4.com
- DNS ASK ap#.##.sslsecure5.com
- DNS ASK ap#.##.sslsecure6.com
- DNS ASK ap#.##.sslsecure7.com
- DNS ASK ap#.##.sslsecure8.com
- DNS ASK ap#.##.sslsecure9.com
- DNS ASK tr###.#2.sslsecure5.com
- DNS ASK tr###.#2.sslsecure4.com
- DNS ASK tr###.#2.sslsecure3.com
- DNS ASK tr###.#2.sslsecure2.com
- DNS ASK tr###.#2.sslsecure1.com
- DNS ASK tr###.v2.secdls.com
- DNS ASK st######.sslsecure10.com
- DNS ASK st#####r.sslsecure9.com
- DNS ASK st#####r.sslsecure8.com
- DNS ASK ap#.##.sslsecure2.com
- DNS ASK st#####r.sslsecure6.com
- DNS ASK st#####r.sslsecure5.com
- DNS ASK st#####r.sslsecure4.com
- DNS ASK st#####r.sslsecure3.com
- DNS ASK st#####r.sslsecure2.com
- DNS ASK st#####r.sslsecure1.com
- DNS ASK st#####r.paleokits.net
- DNS ASK ap#.##.sslsecure10.com
- DNS ASK dt####.secdls.com
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
