Technical Information
Modifies file system
Creates the following files
- <Current directory>\zizgrbqoti.exe
- <Current directory>\apphylqipk.exe
- <Current directory>\niwejiurzh.exe
- <Current directory>\unhislwxnt.exe
- <Current directory>\atsuapplcx.exe
- <Current directory>\dwjtqsygow.exe
- <Current directory>\uzsvvquzag.exe
- <Current directory>\dhxnwuoqig.exe
- <Current directory>\tkhpaslktj.exe
- <Current directory>\ukwdphpdbg.exe
- <Current directory>\kmqreqhdwl.exe
- <Current directory>\nphqutqyrj.exe
- <Current directory>\tnscdwsmgw.exe
- <Current directory>\ddflwtdcow.exe
- <Current directory>\gyosuvmfiv.exe
- <Current directory>\qobbnaywrv.exe
- <Current directory>\qhqvtcogkx.exe
- nul
- <Current directory>\tchujfxjfw.exe
- <Current directory>\xnyoqvungh.exe
- <Current directory>\hrohdklurk.exe
Deletes the following files
- <Current directory>\zizgrbqoti.exe
- <Current directory>\niwejiurzh.exe
- <Current directory>\unhislwxnt.exe
- <Current directory>\atsuapplcx.exe
- <Current directory>\uzsvvquzag.exe
- <Current directory>\dwjtqsygow.exe
- <Current directory>\tkhpaslktj.exe
- <Current directory>\dhxnwuoqig.exe
- <Current directory>\apphylqipk.exe
- <Current directory>\kmqreqhdwl.exe
- <Current directory>\nphqutqyrj.exe
- <Current directory>\tnscdwsmgw.exe
- <Current directory>\ddflwtdcow.exe
- <Current directory>\gyosuvmfiv.exe
- <Current directory>\qobbnaywrv.exe
- <Current directory>\qhqvtcogkx.exe
- <Current directory>\tchujfxjfw.exe
- <Current directory>\xnyoqvungh.exe
- <Current directory>\ukwdphpdbg.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\zizgrbqoti.exe'
- '<Current directory>\apphylqipk.exe'
- '<Current directory>\niwejiurzh.exe'
- '<Current directory>\unhislwxnt.exe'
- '<Current directory>\atsuapplcx.exe'
- '<Current directory>\dwjtqsygow.exe'
- '<Current directory>\uzsvvquzag.exe'
- '<Current directory>\dhxnwuoqig.exe'
- '<Current directory>\tkhpaslktj.exe'
- '<Current directory>\kmqreqhdwl.exe'
- '<Current directory>\xnyoqvungh.exe'
- '<Current directory>\nphqutqyrj.exe'
- '<Current directory>\tnscdwsmgw.exe'
- '<Current directory>\ddflwtdcow.exe'
- '<Current directory>\gyosuvmfiv.exe'
- '<Current directory>\qobbnaywrv.exe'
- '<Current directory>\qhqvtcogkx.exe'
- '<Current directory>\tchujfxjfw.exe'
- '<Current directory>\ukwdphpdbg.exe'
- '<Current directory>\hrohdklurk.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UKWDPHPDBG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\APPHYLQIPK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIWEJIURZH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UNHISLWXNT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ATSUAPPLCX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DWJTQSYGOW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZSVVQUZAG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DHXNWUOQIG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TKHPASLKTJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HROHDKLURK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KMQREQHDWL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPHQUTQYRJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TNSCDWSMGW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DDFLWTDCOW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GYOSUVMFIV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QOBBNAYWRV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHQVTCOGKX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TCHUJFXJFW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZIZGRBQOTI.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XNYOQVUNGH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\URHKSFYKHV.exe"
