Техническая информация
- <SYSTEM32>\tasks\iu.exe
- %APPDATA%\iu.exe
- '17#.#95.100.101':56001
- '17#.#95.100.101':56002
- '17#.#95.100.101':56003
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -NoProfile -ExecutionPolicy Bypass -Enc UgBlAGcAaQBzAHQAZQByAC0AUwBjAGgAZQBkAHUAbABlAGQAVABhAHMAawAgAC0AVABhAHMAawBOAGEAbQBlACAAJwBpAHUALgBlAHgAZQAnACAALQBBAGMAdABpAG8AbgAgACgATgBlAHcALQBTAGMAa...