Technical Information
Modifies file system
Creates the following files
- <Current directory>\qzuunxrypb.exe
- <Current directory>\rhkeuzqkdd.exe
- <Current directory>\ezrsnwvtnr.exe
- <Current directory>\opekgagrda.exe
- <Current directory>\bhlhsftsno.exe
- <Current directory>\rkvjwdpmqq.exe
- <Current directory>\edcfqatvzf.exe
- <Current directory>\ufmhugyhlp.exe
- <Current directory>\blxuvcrvzb.exe
- <Current directory>\oleqpheejp.exe
- <Current directory>\lbzslvpepr.exe
- <Current directory>\belnaeifse.exe
- <Current directory>\rrjjcmvjpq.exe
- <Current directory>\esrfwjzszf.exe
- <Current directory>\rkgcholtib.exe
- <Current directory>\ufpbxruwdr.exe
- <Current directory>\hfeyjoyxno.exe
- <Current directory>\uyludtcgwc.exe
- nul
- <Current directory>\doyewpwfec.exe
- <Current directory>\gjhdmsxzzb.exe
- <Current directory>\hjerjhjshq.exe
- <Current directory>\ybrvzylvfd.exe
Deletes the following files
- <Current directory>\qzuunxrypb.exe
- <Current directory>\lbzslvpepr.exe
- <Current directory>\ezrsnwvtnr.exe
- <Current directory>\opekgagrda.exe
- <Current directory>\bhlhsftsno.exe
- <Current directory>\rkvjwdpmqq.exe
- <Current directory>\edcfqatvzf.exe
- <Current directory>\ufmhugyhlp.exe
- <Current directory>\blxuvcrvzb.exe
- <Current directory>\oleqpheejp.exe
- <Current directory>\belnaeifse.exe
- <Current directory>\hjerjhjshq.exe
- <Current directory>\rrjjcmvjpq.exe
- <Current directory>\esrfwjzszf.exe
- <Current directory>\rkgcholtib.exe
- <Current directory>\ufpbxruwdr.exe
- <Current directory>\hfeyjoyxno.exe
- <Current directory>\doyewpwfec.exe
- <Current directory>\uyludtcgwc.exe
- <Current directory>\gjhdmsxzzb.exe
- <Current directory>\ybrvzylvfd.exe
- <Current directory>\rhkeuzqkdd.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\qzuunxrypb.exe'
- '<Current directory>\rhkeuzqkdd.exe'
- '<Current directory>\ezrsnwvtnr.exe'
- '<Current directory>\opekgagrda.exe'
- '<Current directory>\bhlhsftsno.exe'
- '<Current directory>\rkvjwdpmqq.exe'
- '<Current directory>\edcfqatvzf.exe'
- '<Current directory>\ufmhugyhlp.exe'
- '<Current directory>\blxuvcrvzb.exe'
- '<Current directory>\oleqpheejp.exe'
- '<Current directory>\belnaeifse.exe'
- '<Current directory>\hjerjhjshq.exe'
- '<Current directory>\rrjjcmvjpq.exe'
- '<Current directory>\esrfwjzszf.exe'
- '<Current directory>\rkgcholtib.exe'
- '<Current directory>\ufpbxruwdr.exe'
- '<Current directory>\hfeyjoyxno.exe'
- '<Current directory>\uyludtcgwc.exe'
- '<Current directory>\doyewpwfec.exe'
- '<Current directory>\gjhdmsxzzb.exe'
- '<Current directory>\lbzslvpepr.exe'
- '<Current directory>\ybrvzylvfd.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LBZSLVPEPR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RHKEUZQKDD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EZRSNWVTNR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OPEKGAGRDA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHLHSFTSNO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RKVJWDPMQQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDCFQATVZF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UFMHUGYHLP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BLXUVCRVZB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OLEQPHEEJP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YBRVZYLVFD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BELNAEIFSE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RRJJCMVJPQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ESRFWJZSZF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RKGCHOLTIB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UFPBXRUWDR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HFEYJOYXNO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UYLUDTCGWC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DOYEWPWFEC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GJHDMSXZZB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QZUUNXRYPB.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJERJHJSHQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VGAWJVCASE.exe"
