Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Defenders' = '<SYSTEM32>\hacker\svchoct.exe'
- '<SYSTEM32>\hacker\svchoct.exe'
- <SYSTEM32>\hacker\svchoct.exe
- <SYSTEM32>\hacker\svchoct.exe
- 'fa####oh.zapto.org':81
- 'fr###eoip.net':80
- fr###eoip.net/xml/
- DNS ASK fa####oh.zapto.org
- DNS ASK fr###eoip.net