Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaluij] 'ImagePath' = '<SYSTEM32>\eeosec.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaluij] 'Start' = '00000002'
- '<SYSTEM32>\eeosec.exe'
- 'C:\Server_se.exe'
- <SYSTEM32>\eeosec.exe
- C:\138554461352.mp4
- C:\Server_se.exe
- 'kh####8v.codns.com':6918
- DNS ASK kh####8v.codns.com