Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TS8L6w' = '%ALLUSERSPROFILE%\Ib3oNIKglmrH\eQBgkZKkK5fTG\BF2C8p2HAbInO\K6g6HrsV.exe'
- '%ALLUSERSPROFILE%\Ib3oNIKglmrH\eQBgkZKkK5fTG\BF2C8p2HAbInO\K6g6HrsV.exe'
- %ALLUSERSPROFILE%\Ib3oNIKglmrH\eQBgkZKkK5fTG\BF2C8p2HAbInO\K6g6HrsV.exe
- %ALLUSERSPROFILE%\88270c99ad172825a294c3e4179f1f4ac43cd6cd
- %ALLUSERSPROFILE%\Ib3oNIKglmrH\eQBgkZKkK5fTG\BF2C8p2HAbInO\K6g6HrsV.exe
- 'dl.##opbox.com':80
- dl.##opbox.com/u/24080239/test.txt
- DNS ASK dl.##opbox.com
- DNS ASK se#####.#147852369.codisk.com
- ClassName: 'Indicator' WindowName: '(null)'