Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- '%APPDATA%\KB01321295.exe'
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\exp1.tmp.bat"
- <SYSTEM32>\cmd.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '21#.#91.168.98':8080
- '20#.#69.13.84':8080
- '72.##.203.140':8080
- '19#.#1.57.197':8080
- '20#.222.1.8':8080
- '83.##8.208.55':8080
- '21#.#55.134.110':8080
- '21#.#4.194.242':8080
- '19#.#11.72.46':8080
- '21#.#8.12.158':8080
- '87.##0.41.155':8080
- '41.##8.5.140':8080
- '21#.#6.23.100':8080
- '89.#7.55.33':8080
- '72.##7.253.106':8080
- ClassName: 'Indicator' WindowName: ''