Technical Information
Modifies file system
Creates the following files
- <Current directory>\uejdlmmoys.exe
- <Current directory>\ywtklxfsvp.exe
- <Current directory>\ozcupubeys.exe
- <Current directory>\brkjbsfnio.exe
- <Current directory>\suttfxkhtq.exe
- <Current directory>\ixuvjvhtws.exe
- <Current directory>\vpcrvalcgp.exe
- <Current directory>\lsltzyqwrr.exe
- <Current directory>\ystqlvuxbf.exe
- <Current directory>\ovcspbqrep.exe
- <Current directory>\itjigraykf.exe
- <Current directory>\bojpjydaoe.exe
- <Current directory>\ywedwztzos.exe
- <Current directory>\hernpemxwt.exe
- <Current directory>\ruweqiyomb.exe
- <Current directory>\xzpiyezcaf.exe
- <Current directory>\avypohiwne.exe
- <Current directory>\kllyhlunde.exe
- nul
- <Current directory>\kdisnnkfwp.exe
- <Current directory>\qjtevjellb.exe
- <Current directory>\lwxgccoqee.exe
- <Current directory>\srigctdehd.exe
Deletes the following files
- <Current directory>\uejdlmmoys.exe
- <Current directory>\ozcupubeys.exe
- <Current directory>\brkjbsfnio.exe
- <Current directory>\suttfxkhtq.exe
- <Current directory>\ixuvjvhtws.exe
- <Current directory>\vpcrvalcgp.exe
- <Current directory>\lsltzyqwrr.exe
- <Current directory>\ovcspbqrep.exe
- <Current directory>\ystqlvuxbf.exe
- <Current directory>\ywtklxfsvp.exe
- <Current directory>\bojpjydaoe.exe
- <Current directory>\ywedwztzos.exe
- <Current directory>\hernpemxwt.exe
- <Current directory>\ruweqiyomb.exe
- <Current directory>\xzpiyezcaf.exe
- <Current directory>\avypohiwne.exe
- <Current directory>\kllyhlunde.exe
- <Current directory>\qjtevjellb.exe
- <Current directory>\kdisnnkfwp.exe
- <Current directory>\lwxgccoqee.exe
- <Current directory>\itjigraykf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\uejdlmmoys.exe'
- '<Current directory>\ywtklxfsvp.exe'
- '<Current directory>\ozcupubeys.exe'
- '<Current directory>\brkjbsfnio.exe'
- '<Current directory>\suttfxkhtq.exe'
- '<Current directory>\ixuvjvhtws.exe'
- '<Current directory>\vpcrvalcgp.exe'
- '<Current directory>\lsltzyqwrr.exe'
- '<Current directory>\ystqlvuxbf.exe'
- '<Current directory>\ovcspbqrep.exe'
- '<Current directory>\bojpjydaoe.exe'
- '<Current directory>\lwxgccoqee.exe'
- '<Current directory>\ywedwztzos.exe'
- '<Current directory>\hernpemxwt.exe'
- '<Current directory>\ruweqiyomb.exe'
- '<Current directory>\xzpiyezcaf.exe'
- '<Current directory>\avypohiwne.exe'
- '<Current directory>\kllyhlunde.exe'
- '<Current directory>\kdisnnkfwp.exe'
- '<Current directory>\qjtevjellb.exe'
- '<Current directory>\itjigraykf.exe'
- '<Current directory>\srigctdehd.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YLHFISYQJC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IBVOBPSORD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SRIGCTDEHD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ITJIGRAYKF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YWTKLXFSVP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OZCUPUBEYS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BRKJBSFNIO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SUTTFXKHTQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IXUVJVHTWS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VPCRVALCGP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LSLTZYQWRR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YSTQLVUXBF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OVCSPBQREP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BOJPJYDAOE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LWXGCCOQEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YWEDWZTZOS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HERNPEMXWT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RUWEQIYOMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XZPIYEZCAF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AVYPOHIWNE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KLLYHLUNDE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KDISNNKFWP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QJTEVJELLB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UEJDLMMOYS.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MSAIWNUHZO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CCNRVRAQJO.exe"
