Техническая информация
- %WINDIR%\b9pqr60m9.exe
- %TEMP%\content\3380-3936-b9pqr60m9.exe-16-17-40-974.dump
- %WINDIR%\b9pqr60m9.exe в %TEMP%\889765\....\temporaryfile
- 'st##mcom.cn':443
- 'x1.#.lencr.org':80
- http://x1.#.lencr.org/
- 'st##mcom.cn':443
- DNS ASK st##mcom.cn
- DNS ASK x1.#.lencr.org
- '%WINDIR%\b9pqr60m9.exe'