Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'netCFx' = '"%APPDATA%\Microsoft\netCFx.exe"'
- %APPDATA%\Microsoft\IMG_1337.png
- %APPDATA%\Microsoft\netCFx.exe
- %TEMP%\16203e36-b63a-4281-b013-3f2985c4354a\CliSecureRT.dll
- 'la##bit.com':587
- DNS ASK la##bit.com
- ClassName: 'Indicator' WindowName: ''