Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- '%APPDATA%\KB01321295.exe'
- <SYSTEM32>\cmd.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '88.##1.130.98':8080
- '91.##1.30.185':8080
- '18#.#37.17.180':8080
- '85.#4.66.2':8080
- '17#.#43.234.138':8080
- '19#.#67.29.136':8080
- '67.##7.129.95':8080
- '88.##8.135.227':8080
- '21#.#6.23.100':8080
- '19#.#4.219.226':8080
- '41.##3.18.120':8080
- '21#.#14.74.5':8080
- '20#.#09.55.163':8080
- '20#.#9.5.195':8080
- '11#.#63.216.107':8080
- ClassName: 'Indicator' WindowName: ''