Technical Information
Modifies file system
Creates the following files
- <Current directory>\dapsnzvlrm.exe
- <Current directory>\ynfdocaulx.exe
- <Current directory>\lgmaihfdvl.exe
- <Current directory>\vwzjbeytlm.exe
- <Current directory>\eembcikstm.exe
- <Current directory>\reuxonwtda.exe
- <Current directory>\bmzppkirtb.exe
- <Current directory>\lcbnfdgaiy.exe
- <Current directory>\hrstxnjxhn.exe
- <Current directory>\oqrqdttupk.exe
- <Current directory>\uvkdmpmidw.exe
- <Current directory>\abvhvsoosb.exe
- <Current directory>\uzoqpttdqj.exe
- nul
- <Current directory>\uskbmvknjm.exe
- <Current directory>\eamhcpzezk.exe
- <Current directory>\cmwvezmcay.exe
Deletes the following files
- <Current directory>\dapsnzvlrm.exe
- <Current directory>\uskbmvknjm.exe
- <Current directory>\uzoqpttdqj.exe
- <Current directory>\abvhvsoosb.exe
- <Current directory>\uvkdmpmidw.exe
- <Current directory>\oqrqdttupk.exe
- <Current directory>\eamhcpzezk.exe
- <Current directory>\hrstxnjxhn.exe
- <Current directory>\bmzppkirtb.exe
- <Current directory>\reuxonwtda.exe
- <Current directory>\eembcikstm.exe
- <Current directory>\vwzjbeytlm.exe
- <Current directory>\lgmaihfdvl.exe
- <Current directory>\ynfdocaulx.exe
- <Current directory>\lcbnfdgaiy.exe
- <Current directory>\cmwvezmcay.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\dapsnzvlrm.exe'
- '<Current directory>\uskbmvknjm.exe'
- '<Current directory>\uzoqpttdqj.exe'
- '<Current directory>\abvhvsoosb.exe'
- '<Current directory>\uvkdmpmidw.exe'
- '<Current directory>\oqrqdttupk.exe'
- '<Current directory>\eamhcpzezk.exe'
- '<Current directory>\hrstxnjxhn.exe'
- '<Current directory>\bmzppkirtb.exe'
- '<Current directory>\reuxonwtda.exe'
- '<Current directory>\eembcikstm.exe'
- '<Current directory>\vwzjbeytlm.exe'
- '<Current directory>\lgmaihfdvl.exe'
- '<Current directory>\ynfdocaulx.exe'
- '<Current directory>\lcbnfdgaiy.exe'
- '<Current directory>\cmwvezmcay.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMWVEZMCAY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LCBNFDGAIY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YNFDOCAULX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LGMAIHFDVL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VWZJBEYTLM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EEMBCIKSTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\REUXONWTDA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BMZPPKIRTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HRSTXNJXHN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EAMHCPZEZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OQRQDTTUPK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UVKDMPMIDW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ABVHVSOOSB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZOQPTTDQJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\USKBMVKNJM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DAPSNZVLRM.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YRFWOELHFZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYIDICVXMX.exe"
