Техническая информация
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles%\company\3dmarkssdf\1.exe
- %ProgramFiles%\company\3dmarkssdf\2.exe
- %ProgramFiles%\company\3dmarkssdf\3.exe
- %ProgramFiles%\company\3dmarkssdf\4.exe
- %WINDIR%\ads.reg
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles%\company\3dmarkssdf\1.exe
- DNS ASK ma##em.top
- DNS ASK ip###ger.org
- '%ProgramFiles%\company\3dmarkssdf\1.exe'
- '%ProgramFiles%\company\3dmarkssdf\2.exe'
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 && del "%ProgramFiles%\Company\3DMarkssdf\1.exe"' (со скрытым окном)
- '%ProgramFiles%\mozilla firefox\firefox.exe' -osint -url "https://iplogger.org/1UkU27.html"
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 && del "%ProgramFiles%\Company\3DMarkssdf\1.exe"
- '<SYSTEM32>\ping.exe' 127.0.0.1