Техническая информация
- autoit3.exe
- %TEMP%\ixp000.tmp\math.a3x
- %TEMP%\ixp000.tmp\autoit3.exe
- %TEMP%\ixp000.tmp\autoit3.exe
- %TEMP%\ixp000.tmp\math.a3x
- '19#.#48.56.145':80
- http://19#.#48.56.145/8e469217c34746588eec.php
- DNS ASK mh########uBDCKa.mhOqpleDksuBDCKa
- DNS ASK microsoft.com
- '%TEMP%\ixp000.tmp\autoit3.exe' Math.a3x
- '%TEMP%\ixp000.tmp\autoit3.exe'
- '%TEMP%\ixp000.tmp\autoit3.exe' Math.a3x (со скрытым окном)