Technical Information
Modifies file system
Creates the following files
- <Current directory>\jxmncdajwt.exe
- <Current directory>\lfbojnsvsd.exe
- <Current directory>\bilznlwpdf.exe
- <Current directory>\rlubrjtigi.exe
- <Current directory>\hnwdvpqcrs.exe
- <Current directory>\yqffanuouu.exe
- <Current directory>\hgswtrgmku.exe
- <Current directory>\yjuyxpdgoe.exe
- <Current directory>\omdabnhszh.exe
- <Current directory>\epfkgsemcr.exe
- <Current directory>\uromkqbgnt.exe
- <Current directory>\kuyooofarv.exe
- <Current directory>\xnflatjbas.exe
- <Current directory>\bxwfpjgebv.exe
- <Current directory>\nponergumu.exe
- <Current directory>\uvzrnvhaag.exe
- <Current directory>\kybbrseudi.exe
- <Current directory>\aakdvyboot.exe
- <Current directory>\ntsahvnxyh.exe
- <Current directory>\atzxbaryiv.exe
- <Current directory>\nmoumxvhrr.exe
- <Current directory>\aewqychibg.exe
- <Current directory>\nednkamrlu.exe
- <Current directory>\axkcefyaui.exe
- nul
- <Current directory>\npszpccbee.exe
- <Current directory>\tvllyfdpsr.exe
- <Current directory>\esqpixdope.exe
- <Current directory>\lumdlljlyt.exe
Deletes the following files
- <Current directory>\jxmncdajwt.exe
- <Current directory>\bilznlwpdf.exe
- <Current directory>\rlubrjtigi.exe
- <Current directory>\hnwdvpqcrs.exe
- <Current directory>\yqffanuouu.exe
- <Current directory>\hgswtrgmku.exe
- <Current directory>\yjuyxpdgoe.exe
- <Current directory>\omdabnhszh.exe
- <Current directory>\epfkgsemcr.exe
- <Current directory>\uromkqbgnt.exe
- <Current directory>\kuyooofarv.exe
- <Current directory>\xnflatjbas.exe
- <Current directory>\lfbojnsvsd.exe
- <Current directory>\nponergumu.exe
- <Current directory>\uvzrnvhaag.exe
- <Current directory>\kybbrseudi.exe
- <Current directory>\aakdvyboot.exe
- <Current directory>\ntsahvnxyh.exe
- <Current directory>\atzxbaryiv.exe
- <Current directory>\nmoumxvhrr.exe
- <Current directory>\aewqychibg.exe
- <Current directory>\nednkamrlu.exe
- <Current directory>\axkcefyaui.exe
- <Current directory>\npszpccbee.exe
- <Current directory>\tvllyfdpsr.exe
- <Current directory>\esqpixdope.exe
- <Current directory>\bxwfpjgebv.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\jxmncdajwt.exe'
- '<Current directory>\lfbojnsvsd.exe'
- '<Current directory>\bilznlwpdf.exe'
- '<Current directory>\rlubrjtigi.exe'
- '<Current directory>\hnwdvpqcrs.exe'
- '<Current directory>\yqffanuouu.exe'
- '<Current directory>\hgswtrgmku.exe'
- '<Current directory>\yjuyxpdgoe.exe'
- '<Current directory>\omdabnhszh.exe'
- '<Current directory>\epfkgsemcr.exe'
- '<Current directory>\uromkqbgnt.exe'
- '<Current directory>\kuyooofarv.exe'
- '<Current directory>\xnflatjbas.exe'
- '<Current directory>\nponergumu.exe'
- '<Current directory>\esqpixdope.exe'
- '<Current directory>\uvzrnvhaag.exe'
- '<Current directory>\kybbrseudi.exe'
- '<Current directory>\aakdvyboot.exe'
- '<Current directory>\ntsahvnxyh.exe'
- '<Current directory>\atzxbaryiv.exe'
- '<Current directory>\nmoumxvhrr.exe'
- '<Current directory>\aewqychibg.exe'
- '<Current directory>\nednkamrlu.exe'
- '<Current directory>\axkcefyaui.exe'
- '<Current directory>\npszpccbee.exe'
- '<Current directory>\tvllyfdpsr.exe'
- '<Current directory>\bxwfpjgebv.exe'
- '<Current directory>\lumdlljlyt.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BILZNLWPDF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RLUBRJTIGI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HNWDVPQCRS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YQFFANUOUU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HGSWTRGMKU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YJUYXPDGOE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OMDABNHSZH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EPFKGSEMCR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UROMKQBGNT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KUYOOOFARV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XNFLATJBAS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPONERGUMU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LFBOJNSVSD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ESQPIXDOPE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KYBBRSEUDI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AAKDVYBOOT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTSAHVNXYH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ATZXBARYIV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NMOUMXVHRR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AEWQYCHIBG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NEDNKAMRLU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AXKCEFYAUI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPSZPCCBEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TVLLYFDPSR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JXMNCDAJWT.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UVZRNVHAAG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BXWFPJGEBV.exe"
