Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Adobe Flash Player' = '<SYSTEM32>\install_flash_player.exe'
- chrome.exe
- %WINDIR%\WebFlash\Crx\script.js
- %WINDIR%\WebFlash\Crx\manifest.json
- <SYSTEM32>\install_flash_player.exe
- %WINDIR%\WebFlash\Crx\background.js
- %WINDIR%\WebFlash\Crx\icon.png
- %WINDIR%\WebFlash\Crx\jquery-1.9.1.min.js
- 'he####kartlar.com':80
- 'kr#####cekimleri.com':80
- 'wp#d':80
- kr#####cekimleri.com/Crx/script.js
- kr#####cekimleri.com/Crx/manifest.json
- he####kartlar.com/kartaldesign/2.exe
- kr#####cekimleri.com/Crx/jquery-1.9.1.min.js
- wp#d/wpad.dat
- kr#####cekimleri.com/Crx/background.js
- kr#####cekimleri.com/Crx/icon.png
- DNS ASK he####kartlar.com
- DNS ASK kr#####cekimleri.com
- DNS ASK wp#d