Техническая информация
- '%APPDATA%\microsoft\windows\templates\wgkfu.exe'
- %APPDATA%\microsoft\windows\templates\wgkfu.exe
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- DNS ASK pl##.root.gg
- DNS ASK oc##.thawte.com