Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -ExecutionPolicy Bypass -Command Add-MpPreference -ExclusionPath 'C:\'
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3150914307-1777937420-491476919-1000\83aa4cc77f591dfc2374580bbd95f6ba_d99ef00b-ccd3-4f1d-9980-90ac453b0b47
- %TEMP%\7ed606da664109c40681b0fe3ce926fc.bat
- http://21#.#32.235.96/forest/opportunitymobilepro.zip
- '%ProgramFiles%\java\jre1.8.0_45\bin\javaw.exe' -Dfile.encoding=UTF-8 -classpath "<Полный путь к файлу>" org.develnext.jphp.ext.javafx.FXLauncher
- '<SYSTEM32>\cmd.exe' /c %TEMP%\7ed606da664109c40681b0fe3ce926fc.bat