Техническая информация
- '<SYSTEM32>\cmd.exe' /c %TEMP%\MSBV5au1$$.bat
- %TEMP%\MSBV5au1$$.bat
- %TEMP%\guid.txt
- %APPDATA%\MSBV5\check.ini
- %TEMP%\guid.txt
- %APPDATA%\MSBV5\check.ini
- 'localhost':1040
- 'zu#.##sidebar.co.kr':80
- http://zu#.##sidebar.co.kr/app/guid.php
- http://zu#.##sidebar.co.kr/app/ver.php?ta#############
- http://zu#.##sidebar.co.kr/app/set.php
- DNS ASK zu#.##sidebar.co.kr