Техническая информация
- '%APPDATA%\runsx.exe'
- %APPDATA%\runsx.exe
- '16#.#00.8.42':80
- 'aw#.#mazon.com':443
- 'x.##2.us':80
- 'ri###timad.com':80
- http://16#.#00.8.42/spisok.exe
- http://x.##2.us/x.cer
- 'aw#.#mazon.com':443
- DNS ASK aw#.#mazon.com
- DNS ASK x.##2.us
- DNS ASK ri###timad.com
- '%APPDATA%\runsx.exe' ' (со скрытым окном)