Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System.Defense.ieGoldMax' = '<SYSTEM32>\GbpSm.exe'
- 'sq#########.#xpressomaranatalogistica.com.br':445
- 'sq#########.#xpressomaranatalogistica.com.br':1433
- DNS ASK sq#########.#xpressomaranatalogistica.com.br