Техническая информация
- %TEMP%\dnmkyhqppc.js
- %TEMP%\99683.9429658019.exe
- %TEMP%\12065.994306756096.exe
- http://ca###vape.com/2TLmhu
- http://sp####haicafe.com/4I9bwO
- http://st#######ndstonesjewelry.com/iJX0w5
- http://de###e.com.ar/7ANhtZ
- http://or####tags.co.uk/BRgn0x
- http://el###sup.com/kZ0mwu
- http://in###itees.com/ZV3XUM
- http://ca####sunicos.com/FYza3g
- http://do###ind.com/hm7wQ5
- http://no####rothers.com/tbjMPd
- http://bi####dalshop.com/RzYisV
- http://mi###cks.com/byOHev
- http://gg##ngs.com/tYzA6X
- DNS ASK ca###vape.com
- DNS ASK gg##ngs.com
- DNS ASK em#.com.sg
- DNS ASK mi###cks.com
- DNS ASK fo#######sourcecentre.com.sg
- DNS ASK bi####dalshop.com
- DNS ASK no####rothers.com
- DNS ASK do###ind.com
- DNS ASK mr####online.com
- DNS ASK lo#####tandliving.ca
- DNS ASK in###itees.com
- DNS ASK el###sup.com
- DNS ASK yu####jewels.com
- DNS ASK or####tags.co.uk
- DNS ASK de###e.com.ar
- DNS ASK st#######ndstonesjewelry.com
- DNS ASK sp####haicafe.com
- DNS ASK ca####sunicos.com
- DNS ASK ph###tphcm.com
- '<SYSTEM32>\wscript.exe' %TEMP%\DnmKyhQPPC.js