Техническая информация
- <SYSTEM32>\tasks\wxdqswedxwd.exe
- %APPDATA%\wxdqswedxwd.exe
- '19#.#48.56.17':56001
- '19#.#48.56.17':56002
- '19#.#48.56.17':56003
- '14#.#5.117.91':443
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -NoProfile -ExecutionPolicy Bypass -Enc UgBlAGcAaQBzAHQAZQByAC0AUwBjAGgAZQBkAHUAbABlAGQAVABhAHMAawAgAC0AVABhAHMAawBOAGEAbQBlACAAJwB3AHgAZABxAHMAdwBlAGQAeAB3AGQALgBlAHgAZQAnACAALQBBAGMAdABpAG8Ab...