Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce] 'Bexa' = 'C:\Users\Public\Bexa.hta'
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- C:\users\public\bexa\bexaest.exe
- C:\users\public\bexa.hta
- 'sa####9.duckdns.org':6988
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK sh###.dmca.gripe
- DNS ASK microsoft.com
- DNS ASK sa####9.duckdns.org
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'