Техническая информация
- '<SYSTEM32>\runas.exe'
- <SYSTEM32>\runas.exe
- %ALLUSERSPROFILE%\Application Data\khaqtjwsnyrqodv
- 'wr######ccrwhrtkw15.info':443
- 'my####ngportal.info':443
- DNS ASK wr######ccrwhrtkw15.info
- DNS ASK my####ngportal.info
- ClassName: 'shell_traywnd' WindowName: ''