Technical Information
Modifies file system
Creates the following files
- <Current directory>\yuuhxynzgz.exe
- <Current directory>\zcjjdafscj.exe
- <Current directory>\jkwaefzjkj.exe
- <Current directory>\szjkfjlhak.exe
- <Current directory>\fsrgrgxiky.exe
- <Current directory>\ssyddlbrum.exe
- <Current directory>\flfapinada.exe
- <Current directory>\igwznlovqz.exe
- <Current directory>\swjqgpiugz.exe
- <Current directory>\vrapwkjpty.exe
- <Current directory>\irhmppvydm.exe
- <Current directory>\oxsqytodry.exe
- <Current directory>\oihjvvfolb.exe
- <Current directory>\oaedbpvgel.exe
- <Current directory>\rvubrsebzk.exe
- nul
- <Current directory>\eocycxikiy.exe
- <Current directory>\oehqeuuaqz.exe
- <Current directory>\pmwrketumb.exe
- <Current directory>\ctpuyzpldm.exe
Deletes the following files
- <Current directory>\yuuhxynzgz.exe
- <Current directory>\oehqeuuaqz.exe
- <Current directory>\eocycxikiy.exe
- <Current directory>\rvubrsebzk.exe
- <Current directory>\oaedbpvgel.exe
- <Current directory>\oxsqytodry.exe
- <Current directory>\oihjvvfolb.exe
- <Current directory>\irhmppvydm.exe
- <Current directory>\vrapwkjpty.exe
- <Current directory>\swjqgpiugz.exe
- <Current directory>\flfapinada.exe
- <Current directory>\igwznlovqz.exe
- <Current directory>\ssyddlbrum.exe
- <Current directory>\szjkfjlhak.exe
- <Current directory>\fsrgrgxiky.exe
- <Current directory>\jkwaefzjkj.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\yuuhxynzgz.exe'
- '<Current directory>\zcjjdafscj.exe'
- '<Current directory>\jkwaefzjkj.exe'
- '<Current directory>\szjkfjlhak.exe'
- '<Current directory>\fsrgrgxiky.exe'
- '<Current directory>\ssyddlbrum.exe'
- '<Current directory>\flfapinada.exe'
- '<Current directory>\igwznlovqz.exe'
- '<Current directory>\pmwrketumb.exe'
- '<Current directory>\swjqgpiugz.exe'
- '<Current directory>\irhmppvydm.exe'
- '<Current directory>\oxsqytodry.exe'
- '<Current directory>\oihjvvfolb.exe'
- '<Current directory>\oaedbpvgel.exe'
- '<Current directory>\rvubrsebzk.exe'
- '<Current directory>\eocycxikiy.exe'
- '<Current directory>\oehqeuuaqz.exe'
- '<Current directory>\vrapwkjpty.exe'
- '<Current directory>\ctpuyzpldm.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMWRKETUMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZCJJDAFSCJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JKWAEFZJKJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZJKFJLHAK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FSRGRGXIKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SSYDDLBRUM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FLFAPINADA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IGWZNLOVQZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SWJQGPIUGZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VRAPWKJPTY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IRHMPPVYDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXSQYTODRY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OIHJVVFOLB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OAEDBPVGEL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RVUBRSEBZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EOCYCXIKIY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OEHQEUUAQZ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YUUHXYNZGZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CTPUYZPLDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYYWAEGQQW.exe"
