Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\awvuqzia6j.png
- 'be####us.ns1.name':8084
- http://xm####rvices.com/C/ACFAFABGBFDCC_DCCFGFDEGCFDDCACGFAFEGA_AECGCGFEC_FF_CFEC.txt
- DNS ASK pa###bin.com
- DNS ASK xm####rvices.com
- DNS ASK be####us.ns1.name
- '%WINDIR%\syswow64\svchost.exe'