Техническая информация
- '%APPDATA%\bin_cdfc.exe'
- http://18#.#34.216.174/bin_cdfc.exe как %appdata%\bin_cdfc.exe
- %WINDIR%\explorer.exe
- %WINDIR%\syswow64\wininit.exe
- bin_cdfc.exe
- iexplore.exe
- Процесс iexplore.exe, модуль wininet.dll
- %PROGRAMDATA%\hrjytrj.cmd
- %APPDATA%\bin_cdfc.exe
- %APPDATA%\bin_cdfc.exe
- http://18#.#34.216.174/bin_CDFC.exe
- DNS ASK drive.google.com
- DNS ASK do#########ocs.googleusercontent.com
- '%WINDIR%\syswow64\wininit.exe'
- '%WINDIR%\syswow64\cmd.exe' del "%APPDATA%\bin_CDFC.exe"