Техническая информация
- '' (загружен из сети Интернет)
- 'C:\users\public\vbc.exe'
- %WINDIR%\explorer.exe
- vbc.exe
- C:\users\public\vbc.exe
- <Текущая директория>\9e231000
- C:\users\public\vbc.exe
- <PATH_SAMPLE>.xlsx
- '19#.#27.168.194':80
- '10#.#53.78.170':80
- http://19#.#27.168.194/document/inv21/receipt.doc
- http://10#.#53.78.170/receipt/networksec.exe
- DNS ASK pr##kr.com
- DNS ASK ti####rycy41.xyz
- '%ProgramFiles%\microsoft office\office14\winword.exe' -Embedding
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '%WINDIR%\syswow64\wininit.exe'
- '%WINDIR%\syswow64\cmd.exe' del "C:\Users\Public\vbc.exe"