Техническая информация
- [HKLM\SYSTEM\CurrentControlSet\Services\MuUKSUAYOmeWzxRCuhIacvzk] 'ImagePath' = '%TEMP%\MuUKSUAYOmeWzxRCuhIacvzk'
- 'MuUKSUAYOmeWzxRCuhIacvzk' %TEMP%\MuUKSUAYOmeWzxRCuhIacvzk
- <DRIVERS>\salarius.sys
- %TEMP%\muuksuayomewzxrcuhiacvzk
- %TEMP%\muuksuayomewzxrcuhiacvzk
- 'ra#.####ubusercontent.com':443
- 'x1.#.lencr.org':80
- http://x1.#.lencr.org/
- 'ra#.####ubusercontent.com':443
- DNS ASK ra#.####ubusercontent.com
- DNS ASK x1.#.lencr.org