Техническая информация
- [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'a9xrv8nwlc' = '%ALLUSERSPROFILE%\58uu1zzn9v\Wav64.exe'
- <SYSTEM32>\tasks\2qs9uvfpv5g9
- Процесс wav64.exe, модуль ntdll.dll
- %ALLUSERSPROFILE%\58uu1zzn9v\maxxaudioaposhell64.dll
- %ALLUSERSPROFILE%\58uu1zzn9v\wav64.exe
- '47.##.100.245':8443
- '47.##.100.245':8443
- '%ALLUSERSPROFILE%\58uu1zzn9v\wav64.exe'