Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cbc' = '%APPDATA%\cbc\cbc.exe'
- '%APPDATA%\cbc\cbc.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %APPDATA%\cbc\cbc.exe
- 'mi####arm.ddns.net':8005
- DNS ASK mi####arm.ddns.net
- ClassName: 'Indicator' WindowName: ''