Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\aut5b49.tmp
- %TEMP%\shrugged
- %TEMP%\aut5b49.tmp
- '15#.#16.18.157':2404
- 'ge###ugin.net':80
- http://ge###ugin.net/json.gp
- '15#.#16.18.157':2404
- DNS ASK ge###ugin.net
- '%WINDIR%\syswow64\svchost.exe'