Техническая информация
- %WINDIR%\tasks\iloq.job
- <SYSTEM32>\tasks\iloq
- %ALLUSERSPROFILE%\jkkll\iloq.exe
- http://15#.#5.175.225/tor/status-vote/current/consensus
- http://89.##.100.71/tor/server/fp/b198c0b4b8c551f174fbb841a172616e3db3124d
- http://89.##.100.71/tor/server/fp/1f186e04173343305c2f1dfa1021c3e2a204b79d
- http://89.##.100.71/tor/server/fp/1797f3e88f4e8256db35b744784fa96fc0854a4f
- http://89.##.100.71/tor/server/fp/c75cdd818316abbc839f9f0ddaec873fcf60c370
- DNS ASK pz####dvert475.xyz
- DNS ASK pz####erv275.xyz
- DNS ASK ap#.#pify.org
- '%ALLUSERSPROFILE%\jkkll\iloq.exe' start
- '%ALLUSERSPROFILE%\jkkll\iloq.exe' start' (со скрытым окном)