Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- '%APPDATA%\KB01321295.exe'
- <SYSTEM32>\cscript.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '23.##.174.122':8080
- '17#.#92.229.36':8080
- '64.##0.193.112':8080
- '69.#4.89.82':8080
- '20#.#17.147.52':8080
- '20#.#7.243.18':8080
- '20#.#76.226.157':8080
- '17#.#24.221.135':8080
- '21#.#6.23.100':8080
- '19#.#1.215.194':8080
- '59.#0.221.6':8080
- '89.##1.242.217':8080
- '12#.#9.61.59':8080
- '18#.#35.150.72':8080
- ClassName: 'Indicator' WindowName: '(null)'