Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Hatbrus7' = '%HOMEPATH%\Exomorph\monkeyf.vbs'
- monkeyf.exe
- %HOMEPATH%\exomorph\monkeyf.exe
- %HOMEPATH%\exomorph\monkeyf.vbs
- %APPDATA%\e6f983\35a09b.exe
- %HOMEPATH%\exomorph\monkeyf.exe в %APPDATA%\e6f983\35a09b.exe
- 'ah##ev.com':443
- DNS ASK ah##ev.com
- '%HOMEPATH%\exomorph\monkeyf.exe'