Technical Information
Modifies file system
Creates the following files
- <Current directory>\delhgxyriq.exe
- <Current directory>\yydyjgnqbr.exe
- <Current directory>\buuxzjwlwp.exe
- <Current directory>\lkhobfibep.exe
- <Current directory>\uavyujbzuq.exe
- <Current directory>\bxgkcnvfic.exe
- <Current directory>\xfaqpptnar.exe
- <Current directory>\hvfhqlmdqr.exe
- <Current directory>\rlszjpybys.exe
- <Current directory>\rwpkprplzc.exe
- <Current directory>\uzyrfupgmb.exe
- <Current directory>\kchtjsuaxd.exe
- <Current directory>\qisxswnomp.exe
- <Current directory>\qsprpyeyfs.exe
- nul
- <Current directory>\qldkuauiyc.exe
- <Current directory>\lgwbyjjhrc.exe
- <Current directory>\fblppfitdq.exe
Deletes the following files
- <Current directory>\delhgxyriq.exe
- <Current directory>\yydyjgnqbr.exe
- <Current directory>\buuxzjwlwp.exe
- <Current directory>\lkhobfibep.exe
- <Current directory>\uavyujbzuq.exe
- <Current directory>\bxgkcnvfic.exe
- <Current directory>\xfaqpptnar.exe
- <Current directory>\fblppfitdq.exe
- <Current directory>\hvfhqlmdqr.exe
- <Current directory>\rwpkprplzc.exe
- <Current directory>\uzyrfupgmb.exe
- <Current directory>\kchtjsuaxd.exe
- <Current directory>\qisxswnomp.exe
- <Current directory>\qsprpyeyfs.exe
- <Current directory>\qldkuauiyc.exe
- <Current directory>\rlszjpybys.exe
- <Current directory>\lgwbyjjhrc.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\delhgxyriq.exe'
- '<Current directory>\yydyjgnqbr.exe'
- '<Current directory>\buuxzjwlwp.exe'
- '<Current directory>\lkhobfibep.exe'
- '<Current directory>\uavyujbzuq.exe'
- '<Current directory>\bxgkcnvfic.exe'
- '<Current directory>\xfaqpptnar.exe'
- '<Current directory>\lgwbyjjhrc.exe'
- '<Current directory>\hvfhqlmdqr.exe'
- '<Current directory>\rwpkprplzc.exe'
- '<Current directory>\uzyrfupgmb.exe'
- '<Current directory>\kchtjsuaxd.exe'
- '<Current directory>\qisxswnomp.exe'
- '<Current directory>\qsprpyeyfs.exe'
- '<Current directory>\qldkuauiyc.exe'
- '<Current directory>\rlszjpybys.exe'
- '<Current directory>\fblppfitdq.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FBLPPFITDQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LGWBYJJHRC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YYDYJGNQBR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BUUXZJWLWP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LKHOBFIBEP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UAVYUJBZUQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BXGKCNVFIC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XFAQPPTNAR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VLYGOBWDVQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HVFHQLMDQR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RWPKPRPLZC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZYRFUPGMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KCHTJSUAXD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QISXSWNOMP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QSPRPYEYFS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QLDKUAUIYC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DELHGXYRIQ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RLSZJPYBYS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YCESBZYDVB.exe"
