Техническая информация
- '<SYSTEM32>\rundll32.exe' connect
- <SYSTEM32>\rundll32.exe
- %TEMP%\flv1_2016.cfg
- 'bi#.ly':80
- 'www.ca#####2014.xpg.com.br':80
- bi#.ly/1lVQDOG
- www.ca#####2014.xpg.com.br/flavinho_2016_novo.txt
- DNS ASK bi#.ly
- DNS ASK www.ca#####2014.xpg.com.br
- ClassName: '(null)' WindowName: 'rundll32.exe'