Technical Information
Modifies file system
Creates the following files
- <Current directory>\namdpjxywl.exe
- <Current directory>\ohbmwuxssn.exe
- <Current directory>\vnmqepyyha.exe
- <Current directory>\evzifukwpa.exe
- <Current directory>\hyqhvwtrkz.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\bwihqxygiz.exe
- <Current directory>\erzggazbdy.exe
- <Current directory>\bhupkotjjz.exe
- <Current directory>\rrgdrxlkmm.exe
- <Current directory>\evktiegdpl.exe
- <Current directory>\kavfrizjex.exe
- <Current directory>\qggjzeaxsk.exe
- <Current directory>\ujxipgjrfa.exe
- nul
- <Current directory>\aoimykdftm.exe
- <Current directory>\dkztonlaol.exe
- <Current directory>\rcvwxzcugw.exe
- <Current directory>\szhyjszltz.exe
Deletes the following files
- <Current directory>\namdpjxywl.exe
- <Current directory>\evzifukwpa.exe
- <Current directory>\vnmqepyyha.exe
- <Current directory>\hyqhvwtrkz.exe
- <Current directory>\bwihqxygiz.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\erzggazbdy.exe
- <Current directory>\ohbmwuxssn.exe
- <Current directory>\rrgdrxlkmm.exe
- <Current directory>\evktiegdpl.exe
- <Current directory>\kavfrizjex.exe
- <Current directory>\qggjzeaxsk.exe
- <Current directory>\ujxipgjrfa.exe
- <Current directory>\aoimykdftm.exe
- <Current directory>\dkztonlaol.exe
- <Current directory>\rcvwxzcugw.exe
- <Current directory>\szhyjszltz.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\namdpjxywl.exe'
- '<Current directory>\ohbmwuxssn.exe'
- '<Current directory>\vnmqepyyha.exe'
- '<Current directory>\evzifukwpa.exe'
- '<Current directory>\hyqhvwtrkz.exe'
- '<Current directory>\rgvyoteisz.exe'
- '<Current directory>\bwihqxygiz.exe'
- '<Current directory>\erzggazbdy.exe'
- '<Current directory>\rrgdrxlkmm.exe'
- '<Current directory>\rcvwxzcugw.exe'
- '<Current directory>\evktiegdpl.exe'
- '<Current directory>\kavfrizjex.exe'
- '<Current directory>\qggjzeaxsk.exe'
- '<Current directory>\ujxipgjrfa.exe'
- '<Current directory>\aoimykdftm.exe'
- '<Current directory>\dkztonlaol.exe'
- '<Current directory>\bhupkotjjz.exe'
- '<Current directory>\szhyjszltz.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHUPKOTJJZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZHYJSZLTZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FZZBXNVKJK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CDJCHKMHWM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLBGVNIGMY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FVOOUJOHWX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKAVXHGXDN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVKTIEGDPL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKKGDJTOTZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FSDJSEPNKK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZWNGHDEAW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWMCCCGKXM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PWFOQECJNY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CEXRWHQAEJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OHBMWUXSSN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VNMQEPYYHA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVZIFUKWPA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HYQHVWTRKZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RGVYOTEISZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BWIHQXYGIZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ERZGGAZBDY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RRGDRXLKMM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RCVWXZCUGW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDHSJMKYNJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KAVFRIZJEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QGGJZEAXSK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UJXIPGJRFA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AOIMYKDFTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DKZTONLAOL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NAMDPJXYWL.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLQUKCMRUN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZJHKGEPFJL.exe"
