Техническая информация
- %TEMP%\rmvvxwaggz.js
- %TEMP%\35389.238614528855.exe
- %TEMP%\17190.306607869985.exe
- %TEMP%\3841.8535672247926.exe
- http://ar####nwankwo.com/J5wTv8
- http://ko###gmem.net/bTt1eI
- http://co###nte.com.sg/QAN1G8
- http://ib####rect.co.uk/p4HAay
- http://ta###ciadam.com/NhLUBj
- http://st#######ndstonesjewelry.com/iJX0w5
- http://ko####scloset.com/m72rY1
- http://de###e.com.ar/7ANhtZ
- http://re###aby.com.br/oysz46
- http://im##ice.com/4HCbnY
- http://2t##hop.com/AXL5gH
- http://an#####glutenfree.com/WqoNrY
- http://il####lgisayar.com/tyGowZ
- DNS ASK ar####nwankwo.com
- DNS ASK me###ashion.com
- DNS ASK fl###rio.com.br
- DNS ASK ko###gmem.net
- DNS ASK co###nte.com.sg
- DNS ASK ib####rect.co.uk
- DNS ASK ta###ciadam.com
- DNS ASK st#######ndstonesjewelry.com
- DNS ASK ko####scloset.com
- DNS ASK de###e.com.ar
- DNS ASK re###aby.com.br
- DNS ASK im##ice.com
- DNS ASK lx####ing.com.sg
- DNS ASK 2t##hop.com
- DNS ASK an#####glutenfree.com
- DNS ASK il####lgisayar.com
- '<SYSTEM32>\wscript.exe' %TEMP%\rmvVXWaggZ.js