Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\ff.ps1
- %APPDATA%\microsoft\windows\start menu\programs\startup\ll.cmd
- %TEMP%\jut050zq.0.cs
- %TEMP%\jut050zq.cmdline
- %TEMP%\jut050zq.0.cs
- %TEMP%\jut050zq.cmdline
- http://pa###bin.com/raw/DwKQSvJA
- DNS ASK pa###bin.com