Technical Information
Modifies file system
Creates the following files
- <Current directory>\lqmlejizek.exe
- <Current directory>\wvalgnlzpk.exe
- <Current directory>\jnhiakqizz.exe
- <Current directory>\wgoempurin.exe
- <Current directory>\clzjulvxxz.exe
- <Current directory>\pmpfgqzggo.exe
- <Current directory>\shxewtibbm.exe
- <Current directory>\jkhoarfvfo.exe
- <Current directory>\wcoduwrwok.exe
- <Current directory>\cizpuskjdp.exe
- <Current directory>\piomoxwsml.exe
- <Current directory>\flqosuteyn.exe
- <Current directory>\sdxleaxnhc.exe
- <Current directory>\fwnhqxjxry.exe
- <Current directory>\pmszrbvnzy.exe
- <Current directory>\cehwdyzwim.exe
- <Current directory>\shjyheequp.exe
- <Current directory>\cxwhiaqgcp.exe
- <Current directory>\opdeufcpll.exe
- <Current directory>\indnogiejm.exe
- nul
- <Current directory>\vnljadmfta.exe
- <Current directory>\gsqjkihnea.exe
- <Current directory>\wcdrjlvpwa.exe
Deletes the following files
- <Current directory>\lqmlejizek.exe
- <Current directory>\wvalgnlzpk.exe
- <Current directory>\jnhiakqizz.exe
- <Current directory>\wgoempurin.exe
- <Current directory>\clzjulvxxz.exe
- <Current directory>\pmpfgqzggo.exe
- <Current directory>\jkhoarfvfo.exe
- <Current directory>\shxewtibbm.exe
- <Current directory>\wcoduwrwok.exe
- <Current directory>\cizpuskjdp.exe
- <Current directory>\gsqjkihnea.exe
- <Current directory>\piomoxwsml.exe
- <Current directory>\sdxleaxnhc.exe
- <Current directory>\pmszrbvnzy.exe
- <Current directory>\fwnhqxjxry.exe
- <Current directory>\cehwdyzwim.exe
- <Current directory>\shjyheequp.exe
- <Current directory>\cxwhiaqgcp.exe
- <Current directory>\opdeufcpll.exe
- <Current directory>\indnogiejm.exe
- <Current directory>\vnljadmfta.exe
- <Current directory>\flqosuteyn.exe
- <Current directory>\wcdrjlvpwa.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\lqmlejizek.exe'
- '<Current directory>\wvalgnlzpk.exe'
- '<Current directory>\jnhiakqizz.exe'
- '<Current directory>\wgoempurin.exe'
- '<Current directory>\clzjulvxxz.exe'
- '<Current directory>\pmpfgqzggo.exe'
- '<Current directory>\shxewtibbm.exe'
- '<Current directory>\jkhoarfvfo.exe'
- '<Current directory>\wcoduwrwok.exe'
- '<Current directory>\cizpuskjdp.exe'
- '<Current directory>\gsqjkihnea.exe'
- '<Current directory>\piomoxwsml.exe'
- '<Current directory>\sdxleaxnhc.exe'
- '<Current directory>\fwnhqxjxry.exe'
- '<Current directory>\pmszrbvnzy.exe'
- '<Current directory>\cehwdyzwim.exe'
- '<Current directory>\shjyheequp.exe'
- '<Current directory>\cxwhiaqgcp.exe'
- '<Current directory>\opdeufcpll.exe'
- '<Current directory>\indnogiejm.exe'
- '<Current directory>\vnljadmfta.exe'
- '<Current directory>\flqosuteyn.exe'
- '<Current directory>\wcdrjlvpwa.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GSQJKIHNEA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WVALGNLZPK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JNHIAKQIZZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WGOEMPURIN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CLZJULVXXZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMPFGQZGGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SHXEWTIBBM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JKHOARFVFO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCODUWRWOK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CIZPUSKJDP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PIOMOXWSML.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FLQOSUTEYN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDXLEAXNHC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FWNHQXJXRY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMSZRBVNZY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CEHWDYZWIM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SHJYHEEQUP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CXWHIAQGCP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OPDEUFCPLL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\INDNOGIEJM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VNLJADMFTA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQMLEJIZEK.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCDRJLVPWA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\THUTTIMUBB.exe"
