Техническая информация
- '<SYSTEM32>\chajian.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\44e56dcb.bat" "
- %TEMP%\44e56dcb.bat
- %TEMP%\48A369FE.dat
- <SYSTEM32>\chajian.exe
- <SYSTEM32>\chajian.exe
- 'ca###ha.qq.com':80
- http://ca###ha.qq.com/getimage?ai##############################
- DNS ASK ca###ha.qq.com
- ClassName: '' WindowName: 'Program Manager'