Техническая информация
- '<SYSTEM32>\cmd.exe' /c %TEMP%\MSBV2$$$$.bat
- %TEMP%\guid.txt
- %TEMP%\MSBV2$$$$.bat
- %APPDATA%\MSBV2\check.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\guid[1].php
- %TEMP%\guid.txt
- 'localhost':1039
- 'v2.###idebar.co.kr':80
- v2.###idebar.co.kr/app/guid.php
- v2.###idebar.co.kr/app/ver.php?ta#############
- v2.###idebar.co.kr/app/set.php
- DNS ASK v2.###idebar.co.kr