Техническая информация
- 'C:\users\public\svchost32.exe'
- C:\users\public\svchost32.exe
- http://mu####oncovert.com/yes/Hztnokd_Signed_.exe
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- DNS ASK mu####oncovert.com
- DNS ASK cd#.##scordapp.com
- DNS ASK oc##.thawte.com