Техническая информация
- %WINDIR%\tasks\uvdjpv.job
- <SYSTEM32>\tasks\uvdjpv
- %PROGRAMDATA%\hvlao\uvdjpv.exe
- http://20#.#3.164.118/tor/status-vote/current/consensus
- http://95.##5.7.156/tor/server/fp/7e6d3a5a6d4fa6adcb403370bee847a8577093b9
- http://95.##5.7.156/tor/server/fp/204dfd2a2c6a0dc1fa0eacb495218e0b661704fd
- http://95.##5.7.156/tor/server/fp/5a127c65b275540a90dbf60f33d55baf5d512b9e
- http://95.##5.7.156/tor/server/fp/0af90285d6b3ecc52abfa3cb31404df6faf93134
- DNS ASK ad###t127ds.xyz
- DNS ASK ad###ace147.xyz
- DNS ASK ap#.#pify.org
- '%PROGRAMDATA%\hvlao\uvdjpv.exe' start
- '%PROGRAMDATA%\hvlao\uvdjpv.exe' start' (со скрытым окном)