Техническая информация
- '<SYSTEM32>\mshta.exe' "%ALLUSERSPROFILE%\qWBATExcel4MacroSheet.sct"
- %ALLUSERSPROFILE%\qwbatexcel4macrosheet.sct
- %ALLUSERSPROFILE%\quppercaserowletter.exe
- 'pa####tadvisry.com':8088
- DNS ASK pa####tadvisry.com
- '%ALLUSERSPROFILE%\quppercaserowletter.exe'