Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Hall' = '%WINDIR%\sot.exe'
- 'C:\Xunleiii.EXE'
- 'C:\Xunlei.EXE'
- 'C:\Xunleii.EXE'
- C:\Xunleii.EXE
- C:\Xunleiii.EXE
- %WINDIR%\sot.exe
- C:\Xunlei.EXE
- 'any':2019
- 'any':2018
- 'any':2017
- 'www.dk###777.com':2017
- 'www.dk###999.com':2019
- 'www.dk###888.com':2018
- DNS ASK www.dk###888.com
- DNS ASK www.dk###999.com
- DNS ASK www.dk###777.com