Техническая информация
- <SYSTEM32>\tasks\certificatepropagation
- C:\users\public\joining\joining.szxazdqnqena
- C:\users\public\joining\joining.szxazdqnqena
- 'ca##ndas.ru':80
- DNS ASK ca##ndas.ru
- '<SYSTEM32>\schtasks.exe' /CREATE /sc minute /mo 5 /tn CertificatePropagation /tr "mshta.exe ""C:\Users\Public\joining\joining.dll""" /F' (со скрытым окном)
- '<SYSTEM32>\schtasks.exe' /CREATE /sc minute /mo 5 /tn CertificatePropagation /tr "mshta.exe ""C:\Users\Public\joining\joining.dll""" /F