Техническая информация
- '%TEMP%\refect.exe'
- %TEMP%\refect.exe
- %TEMP%\p8uiFA.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\lit11[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\lit11[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\lit11[1].pdf
- 'ig###eco.com':80
- 'ma####ailotto.com':80
- '20#.#53.35.133':16220
- ig###eco.com/mandoc/lit11.pdf
- ma####ailotto.com/mandoc/lit11.pdf
- DNS ASK ig###eco.com
- DNS ASK ma####ailotto.com