Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Synaptics Poiting Device Driver' = '%ALLUSERSPROFILE%\Synaptics\Synaptics.exe'
- %WINDIR%\syswow64\cmd.exe
- C:\evil_dropper.ini
- %TEMP%\ts.ini
- %TEMP%\target_result.txt
- DNS ASK xr##.mooo.com
- '%WINDIR%\syswow64\cmd.exe' /c echo pwned