Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E9D3D35F-6520-DB9E-CDC0-0E0810F6C021}] 'StubPath' = '<SYSTEM32>\bdedibbb.exe'
- <SYSTEM32>\bdedibbb.exe
- <SYSTEM32>\wscript.exe "%TEMP%\S12E57temp.vbs"
- %WINDIR%\Explorer.EXE
- %TEMP%\S12E57temp.vbs
- <SYSTEM32>\bdedibbb.exe
- %TEMP%\S12E57temp.vbs
- 'to#####8307.3322.org':80
- DNS ASK to#####8307.3322.org
- '<IP-адрес в локальной сети>':1035