Техническая информация
- '%APPDATA%\ski.exe'
- %APPDATA%\ski.exe
- http://bo######adventures.co.ke/wp-admin/network/CIC.exe
- http://19#.#39.147.103/base/75B60F51099E26D53D1B62DE5A9FFF9B.html
- http://19#.#39.147.103/base/C153CE1CCAD2548C2547CF3FCE5D339E.html
- DNS ASK bo######adventures.co.ke
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding