Техническая информация
- '<SYSTEM32>\wbem\wmic.exe' process call create 'rundll32.exe "%APPDATA%\69719.dll" CscNetApiGetInterface'
- 'ma#####npackaging.com':443
- 'wo##ix.ga':443
- 'de######inationcovid19.com':443
- 'ma######.thebrandrepublic.store':443
- 'fi#####nadianmedical.ca':443
- 'ca#####lspadubai.com':443
- 'wo##ix.ga':443
- DNS ASK ma#####npackaging.com
- DNS ASK wo##ix.ga
- DNS ASK de######inationcovid19.com
- DNS ASK ma######.thebrandrepublic.store
- DNS ASK fi#####nadianmedical.ca
- DNS ASK ca#####lspadubai.com
- DNS ASK st####.rapidssl.com
- '<SYSTEM32>\wbem\wmic.exe' process call create 'rundll32.exe "%APPDATA%\69719.dll" CscNetApiGetInterface'' (со скрытым окном)
- '<SYSTEM32>\rundll32.exe' "%APPDATA%\69719.dll" CscNetApiGetInterface