Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationalkhv] 'Start' = '00000002'
- '<SYSTEM32>\rebfec.exe'
- '%TEMP%\Server.exe'
- <SYSTEM32>\rebfec.exe
- %TEMP%\[±№]°нµщАЪА§јТё®ЗКјц.mp4
- %TEMP%\Server.exe
- 'wk##.no-ip.org':6969
- DNS ASK wk##.no-ip.org