Техническая информация
- [<HKLM>\SYSTEM\ControlSet002\Services\aeca] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\aeca] 'Start' = '00000001'
- <SYSTEM32>\cmd.exe /c "%TEMP%\e3ba00ad35b5bfe8dc0ed0254dbc664c.bat"
- <SYSTEM32>\aeca.sys
- %TEMP%\e3ba00ad35b5bfe8dc0ed0254dbc664c.bat
- '20#.#52.161.142':7145