Техническая информация
- '%APPDATA%\ski.exe'
- %APPDATA%\ski.exe
- http://bo######adventures.co.ke/wp-admin/network/OSW.exe
- http://19#.#39.147.103/base/99277DE0313D8F3AC8B1C854362828ED.html
- http://19#.#39.147.103/base/C393873424A9CB9C6D7E741325C13725.html
- DNS ASK bo######adventures.co.ke
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding