Technical Information
Modifies file system
Creates the following files
- <Current directory>\fkixnefhkj.exe
- <Current directory>\kdammhpmay.exe
- <Current directory>\ttfvfljkiz.exe
- <Current directory>\gluszintsv.exe
- <Current directory>\qbzjsmhkiv.exe
- <Current directory>\dthgerltrk.exe
- <Current directory>\jzaknnmzgw.exe
- <Current directory>\tpfcoryxow.exe
- <Current directory>\dxsthosnex.exe
- <Current directory>\qpzqbtwwnl.exe
- <Current directory>\dphnmqagxh.exe
- <Current directory>\qiwbyvmhhw.exe
- <Current directory>\tdfioynkum.exe
- <Current directory>\gdufivzlli.exe
- <Current directory>\twbutaeuvx.exe
- <Current directory>\cmolmwxkdx.exe
- <Current directory>\cwdfszgcwi.exe
- nul
- <Current directory>\mmqwtdztmi.exe
- <Current directory>\zfytfaecww.exe
- <Current directory>\xkkptjllqk.exe
- <Current directory>\kkdshehchw.exe
Deletes the following files
- <Current directory>\zfytfaecww.exe
- <Current directory>\gluszintsv.exe
- <Current directory>\qbzjsmhkiv.exe
- <Current directory>\dthgerltrk.exe
- <Current directory>\jzaknnmzgw.exe
- <Current directory>\tpfcoryxow.exe
- <Current directory>\dxsthosnex.exe
- <Current directory>\qpzqbtwwnl.exe
- <Current directory>\kdammhpmay.exe
- <Current directory>\dphnmqagxh.exe
- <Current directory>\tdfioynkum.exe
- <Current directory>\gdufivzlli.exe
- <Current directory>\twbutaeuvx.exe
- <Current directory>\cmolmwxkdx.exe
- <Current directory>\cwdfszgcwi.exe
- <Current directory>\mmqwtdztmi.exe
- <Current directory>\fkixnefhkj.exe
- <Current directory>\qiwbyvmhhw.exe
- <Current directory>\ttfvfljkiz.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\fkixnefhkj.exe'
- '<Current directory>\kdammhpmay.exe'
- '<Current directory>\ttfvfljkiz.exe'
- '<Current directory>\gluszintsv.exe'
- '<Current directory>\qbzjsmhkiv.exe'
- '<Current directory>\dthgerltrk.exe'
- '<Current directory>\jzaknnmzgw.exe'
- '<Current directory>\tpfcoryxow.exe'
- '<Current directory>\dxsthosnex.exe'
- '<Current directory>\xkkptjllqk.exe'
- '<Current directory>\qpzqbtwwnl.exe'
- '<Current directory>\qiwbyvmhhw.exe'
- '<Current directory>\tdfioynkum.exe'
- '<Current directory>\gdufivzlli.exe'
- '<Current directory>\twbutaeuvx.exe'
- '<Current directory>\cmolmwxkdx.exe'
- '<Current directory>\cwdfszgcwi.exe'
- '<Current directory>\mmqwtdztmi.exe'
- '<Current directory>\zfytfaecww.exe'
- '<Current directory>\dphnmqagxh.exe'
- '<Current directory>\kkdshehchw.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XKKPTJLLQK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KDAMMHPMAY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TTFVFLJKIZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GLUSZINTSV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QBZJSMHKIV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DTHGERLTRK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JZAKNNMZGW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TPFCORYXOW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DXSTHOSNEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QPZQBTWWNL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DPHNMQAGXH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QIWBYVMHHW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TDFIOYNKUM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GDUFIVZLLI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWBUTAEUVX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMOLMWXKDX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWDFSZGCWI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MMQWTDZTMI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZFYTFAECWW.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKIXNEFHKJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KKDSHEHCHW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ETEVBHPEZH.exe"
