Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{1D476073-5E7F-AD41-B897-60D4A63F43C6}' = '"%APPDATA%\Fyyte\ujkosa.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
- %APPDATA%\Fyyte\ujkosa.exe
- <SYSTEM32>\ctfmon.exe
- <LS_APPDATA>\epun.igp
- %TEMP%\tmp4475c2d5.bat
- %APPDATA%\Fyyte\ujkosa.exe
- '75.##.184.219':26926
- '96.##6.54.170':17543
- '72.##0.237.206':14774
- '10#.#17.233.48':16503
- '78.##8.43.119':12570
- '19#.#69.125.228':29902
- '82.##8.211.148':23036
- '19#.#06.45.81':14588
- '98.##3.225.70':19739
- '19#.#9.173.62':26145
- '75.##.50.210':14848
- '71.##7.247.166':17171
- '67.##.147.253':10598
- '1.##.141.97':13803
- '79.##.103.162':18342
- '84.##5.70.26':17621
- '18#.#5.141.64':23402
- '77.##.94.249':19923
- '75.#3.59.26':12750
- '65.#4.21.38':15742
- ClassName: 'Indicator' WindowName: ''