Техническая информация
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\selfdel0.bat" "
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 3000
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\batchfile.bat" "
- %TEMP%\selfdel0.bat
- \Device\LanmanRedirector\tribune*\MAILSLOT\NET\NETLOGON
- %TEMP%\1.tmp\batchfile.bat
- %TEMP%\1.tmp\batchfile.bat
- '16#.#94.122.150':80
- '16#.#94.122.150':139
- '16#.#94.122.150':445