Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- https://i.imgur.com/BunPkWE.png
- vahlallha.duckdns.org:8141
- persistence via scheduled task
- C:\Users\<username>\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\svcr.exe
- artifacts dropped
- C:\Users\<username>\AppData\Local\Temp\66e219ce.lnk
- C:\Users\<username>\AppData\Local\Temp\313754185.tmp
- C:\Users\<username>\AppData\Local\Temp\4c8f8331.png
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement