Техническая информация
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\~RF1.bat" "
- iexplore.exe
- %TEMP%\~RF1.bat
- %TEMP%\BitCro.js
- %TEMP%\BitCro.js
- 'www.ad##sh.com':80
- 'pi####3.bitcro.com':443
- http://www.ad##sh.com/script/track_image.php?id############################################
- DNS ASK www.ad##sh.com
- DNS ASK pi####3.bitcro.com