Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '{E7D9FF09-D55C-7FCC-27CA-4EEC9FDBC04C}' = '%APPDATA%\LsAArsHE\BNkAtEaW\LeyiiQbm\bmaiAAqPD.exe'
- %WINDIR%\Tasks\{E7D9FF09-D55C-7FCC-27CA-4EEC9FDBC04C}.job
- '%APPDATA%\LsAArsHE\BNkAtEaW\LeyiiQbm\bmaiAAqPD.exe'
- %APPDATA%\LsAArsHE\BNkAtEaW\LeyiiQbm\bmaiAAqPD.exe
- 'bl####sysdate.com':443
- DNS ASK bl####sysdate.com