Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '879r07mh9g' = '%HOMEPATH%\879r07mh9g.exe'
- %HOMEPATH%\879r07mh9g.exe
- 'jp###452.com':443
- '25#.#55.255.255':443
- '17#.#7.249.209':443
- '17#.#7.197.156':443
- '17#.#7.249.208':443
- DNS ASK jp###452.com
- ClassName: 'Indicator' WindowName: ''