Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Persistence ! System' = '<Текущая директория>\'
- 'sq#######ver.is-an-engineer.com':445
- 'sq#######ver.is-an-engineer.com':1433
- 'co#####.is-red-jumper.com':80
- co#####.is-red-jumper.com/cmm/command.php
- DNS ASK sq#######ver.is-an-engineer.com
- DNS ASK co#####.is-red-jumper.com