Техническая информация
- '<SYSTEM32>\wscript.exe' %TEMP%\meusfff:4777888.js
- %TEMP%\meusfff:4777888.js
- DNS ASK ud###########4920d4560.cloudflareworkers.com
- '<SYSTEM32>\cmd.exe' /S /D /c" echo %6iiirrr:;1;=/% 1>%TEMP%\meusfff:4777888.js"
- '<SYSTEM32>\cmd.exe' /S /D /c" call start wscript.exe %TEMP%\meusfff:4777888.js"
- '<SYSTEM32>\cmd.exe' /S /D /c" pause"