Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<StartUP>' = '%APPDATA%\BotTest\BotnetTest.exe'
- %APPDATA%\BotTest\BotnetTest.exe
- %APPDATA%\BotTest\Set.bin
- %APPDATA%\BotTest\BotnetTest.exe
- 'localhost':80
- localhost/ip.php
- localhost/connect.php
- 'localhost':1038
- 'localhost':1037
- '23#.#55.255.250':1900