Техническая информация
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\Fed-265216'
- '%TEMP%\Fed-687216'
- '%TEMP%\Fed-375216'
- '%TEMP%\Fed-593216'
- '%TEMP%\Fed-62196' /pid=2844
- '%TEMP%\Fed-453226'
- '%TEMP%\Fed-281216'
- '%TEMP%\Fed-375206' /pid=4020
- '%TEMP%\Fed-359216'
- '%TEMP%\Fed-500216'
- '%TEMP%\Fed-765216'
- '%TEMP%\Fed-156216'
- '%TEMP%\Fed-343216'
- '%TEMP%\Fed-406216'
- '%TEMP%\Fed-937216'
- '%TEMP%\Fed-234226'
- '%TEMP%\Fed-343216' /pid=4060
- '%TEMP%\Fed-890226'
- '%TEMP%\Fed-750226'
- '%TEMP%\Fed-703236'
- '%TEMP%\Fed-562236'
- '%TEMP%\Fed-359226'
- '%TEMP%\Fed-218226'
- '%TEMP%\Fed-125226'
- '%TEMP%\Fed-406226'
- '%TEMP%\Fed-984226'
- '%TEMP%\Fed-546226'
- '%TEMP%\Fed-281226'
- '%TEMP%\Fed-687226'
- '%TEMP%\Fed-78226'
- '%TEMP%\Fed-859206'
- '%TEMP%\Fed-875206'
- '%TEMP%\Fed-640196'
- '%TEMP%\Fed-593206'
- '%TEMP%\Fed-156206'
- '%TEMP%\Fed-468206'
- '%TEMP%\Fed-515206'
- '%TEMP%\Fed-500196'
- '%TEMP%\Fed-93196'
- '%TEMP%\Fed-62196'
- '%TEMP%\Fed-203196'
- '%TEMP%\Fed-140196'
- '%TEMP%\Fed-171196'
- '%TEMP%\Fed-484196'
- '%TEMP%\Fed-312196'
- '%TEMP%\Fed-921206'
- '%TEMP%\Fed-187206'
- '%TEMP%\Fed-984206'
- '%TEMP%\Fed-734216'
- '%TEMP%\Fed-656216'
- '%TEMP%\Fed-125216'
- '%TEMP%\Fed-750216'
- '%TEMP%\Fed-234206'
- '%TEMP%\Fed-46206'
- '%TEMP%\Fed-375206'
- '%TEMP%\Fed-171206'
- '%TEMP%\Fed-421206'
- '%TEMP%\Fed-312206'
- '%TEMP%\Fed-687206'
- '%TEMP%\Fed-328206'
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\Fed-453226
- %TEMP%\Fed-281216
- %TEMP%\Fed-593216
- %TEMP%\Fed-984226
- %TEMP%\Fed-125226
- %TEMP%\Fed-406226
- %TEMP%\Fed-375226
- %TEMP%\Fed-265216
- %TEMP%\Fed-156216
- %TEMP%\Fed-359216
- %TEMP%\Fed-500216
- %TEMP%\Fed-937216
- %TEMP%\Fed-687216
- %TEMP%\Fed-343216
- %TEMP%\Fed-406216
- %TEMP%\Fed-546226
- %TEMP%\Fed-359226
- %TEMP%\Fed-750226
- %TEMP%\Fed-234226
- %TEMP%\Fed-437236
- %TEMP%\Fed-109236
- %TEMP%\Fed-703236
- %TEMP%\Fed-562236
- %TEMP%\Fed-890226
- %TEMP%\Fed-687226
- %TEMP%\Fed-78226
- %TEMP%\Fed-484226
- %TEMP%\Fed-46226
- %TEMP%\Fed-218226
- %TEMP%\Fed-703226
- %TEMP%\Fed-281226
- %TEMP%\Fed-765216
- %TEMP%\Fed-859206
- %TEMP%\Fed-875206
- %TEMP%\Fed-640196
- %TEMP%\Fed-593206
- %TEMP%\Fed-156206
- %TEMP%\Fed-468206
- %TEMP%\Fed-515206
- %TEMP%\Fed-500196
- %TEMP%\Fed-93196
- %TEMP%\Fed-62196
- %TEMP%\Fed-203196
- %TEMP%\Fed-140196
- %TEMP%\Fed-171196
- %TEMP%\Fed-484196
- %TEMP%\Fed-312196
- %TEMP%\Fed-171206
- %TEMP%\Fed-375216
- %TEMP%\Fed-921206
- %TEMP%\Fed-187206
- %TEMP%\Fed-734216
- %TEMP%\Fed-656216
- %TEMP%\Fed-125216
- %TEMP%\Fed-750216
- %TEMP%\Fed-984206
- %TEMP%\Fed-421206
- %TEMP%\Fed-46206
- %TEMP%\Fed-375206
- %TEMP%\Fed-328206
- %TEMP%\Fed-234206
- %TEMP%\Fed-312206
- %TEMP%\Fed-687206
