Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Unaspir7' = '%TEMP%\Inddr\hardrecl.vbs'
- hardrecl.exe
- %TEMP%\inddr\hardrecl.exe
- %TEMP%\inddr\hardrecl.vbs
- 'La##sa.ug':6976
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://ve###llos.ug/h1.bin
- DNS ASK drive.google.com
- DNS ASK microsoft.com
- DNS ASK ve###llos.ug
- DNS ASK La##sa.ug
- '%TEMP%\inddr\hardrecl.exe'