Техническая информация
- %TEMP%\qtnslslup1
- %TEMP%\qtnslslup3
- http://pa##ha.com/08yhrf3?Qt#################
- http://re######claimsrecovery.com/08yhrf3?Qt#################
- DNS ASK pa##ha.com
- DNS ASK pa######cprocurement.net
- DNS ASK re######claimsrecovery.com
- DNS ASK gy###nbar.com
- DNS ASK ha###lam.net