Техническая информация
- %WINDIR%\syswow64\taskmgr.exe
- 'ns#.#nspod.net':6666
- '11#.42.4.82':8080
- http://ns#.#nspod.net/
- http://11#.##.4.82:8080/api/Advertise/GetAdvert via 11#.42.4.82
- DNS ASK ns#.#nspod.net
- '%WINDIR%\syswow64\ctfmon.exe' 1732 532A4C76647F737E7760614C607C7F733E7568758404204E3
- '%WINDIR%\syswow64\taskmgr.exe' 1732 532A4C76647F737E7760614C607C7F733E7568758404204E3