Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Communication] 'Start' = '00000002'
- '%PROGRAM_FILES%\Communication\signal.exe' -k
- '<SYSTEM32>\wscript.exe' "%TEMP%\tem.vbs"
- %TEMP%\tem.vbs
- %PROGRAM_FILES%\Communication\signal.exe
- %TEMP%\tem.vbs
- 'up####e.6ssf.com':1234
- DNS ASK up####e.6ssf.com