Technical Information
Modifies file system
Creates the following files
- <Current directory>\aurifmkxor.exe
- <Current directory>\bcgkupjrkb.exe
- <Current directory>\ounhguoatp.exe
- <Current directory>\vayloppfic.exe
- <Current directory>\isoiautprq.exe
- <Current directory>\ebiwnwrojn.exe
- <Current directory>\rbptytvxtb.exe
- <Current directory>\ojkzlutxsp.exe
- <Current directory>\fumwhnmrkm.exe
- <Current directory>\upvluyvchc.exe
- <Current directory>\uakeraluam.exe
- <Current directory>\bfcjaeeapr.exe
- <Current directory>\kviabayyxr.exe
- <Current directory>\hecgokwywo.exe
- nul
- <Current directory>\hozalmeiqq.exe
- <Current directory>\nukmuhgwed.exe
- <Current directory>\hhcigdzlrq.exe
- <Current directory>\prcudppxhc.exe
Deletes the following files
- <Current directory>\aurifmkxor.exe
- <Current directory>\ounhguoatp.exe
- <Current directory>\isoiautprq.exe
- <Current directory>\vayloppfic.exe
- <Current directory>\ebiwnwrojn.exe
- <Current directory>\rbptytvxtb.exe
- <Current directory>\ojkzlutxsp.exe
- <Current directory>\bcgkupjrkb.exe
- <Current directory>\upvluyvchc.exe
- <Current directory>\uakeraluam.exe
- <Current directory>\bfcjaeeapr.exe
- <Current directory>\kviabayyxr.exe
- <Current directory>\hecgokwywo.exe
- <Current directory>\hozalmeiqq.exe
- <Current directory>\nukmuhgwed.exe
- <Current directory>\hhcigdzlrq.exe
- <Current directory>\fumwhnmrkm.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\aurifmkxor.exe'
- '<Current directory>\bcgkupjrkb.exe'
- '<Current directory>\ounhguoatp.exe'
- '<Current directory>\vayloppfic.exe'
- '<Current directory>\isoiautprq.exe'
- '<Current directory>\ebiwnwrojn.exe'
- '<Current directory>\rbptytvxtb.exe'
- '<Current directory>\ojkzlutxsp.exe'
- '<Current directory>\upvluyvchc.exe'
- '<Current directory>\hhcigdzlrq.exe'
- '<Current directory>\uakeraluam.exe'
- '<Current directory>\bfcjaeeapr.exe'
- '<Current directory>\kviabayyxr.exe'
- '<Current directory>\hecgokwywo.exe'
- '<Current directory>\hozalmeiqq.exe'
- '<Current directory>\nukmuhgwed.exe'
- '<Current directory>\fumwhnmrkm.exe'
- '<Current directory>\prcudppxhc.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FUMWHNMRKM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BCGKUPJRKB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OUNHGUOATP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VAYLOPPFIC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ISOIAUTPRQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EBIWNWROJN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RBPTYTVXTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OJKZLUTXSP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PRCUDPPXHC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UPVLUYVCHC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UAKERALUAM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BFCJAEEAPR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KVIABAYYXR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HECGOKWYWO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HOZALMEIQQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NUKMUHGWED.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AURIFMKXOR.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HHCIGDZLRQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CZVXRKDWXO.exe"
