Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- %APPDATA%\KB01321295.exe
- <SYSTEM32>\cscript.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '20#.#43.147.35':8080
- '21#.#4.250.173':8080
- '20#.#72.252.26':8080
- '41.##8.5.140':8080
- '31.##.189.212':8080
- '83.##3.134.23':8080
- '18#.#06.189.124':8080
- '12#.#9.61.59':8080
- '20#.#69.13.84':8080
- '21#.#6.23.100':8080
- '18#.#35.150.72':8080
- '20#.#17.147.52':8080
- '58.#8.2.214':8080
- '64.##.164.18':8080
- ClassName: 'Indicator' WindowName: ''