Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- %APPDATA%\KB01321295.exe
- <SYSTEM32>\cscript.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '21#.#91.168.98':8080
- '17#.#24.208.60':8080
- '11#.#30.65.77':8080
- '19#.#1.212.78':8080
- '46.##.218.71':8080
- '19#.#11.72.46':8080
- '84.##.217.109':8080
- '89.#7.55.33':8080
- '71.##.140.153':8080
- ClassName: 'Indicator' WindowName: ''