Technical Information
Modifies file system
Creates the following files
- <Current directory>\pjbfydrsly.exe
- <Current directory>\ubkuxojxjw.exe
- <Current directory>\htsrrlngsk.exe
- <Current directory>\qjfakqhwbk.exe
- <Current directory>\hmokpodqmv.exe
- <Current directory>\tewhalpzvj.exe
- <Current directory>\khfjfqmtzl.exe
- <Current directory>\qnqnnufznx.exe
- <Current directory>\gqsprsksyi.exe
- <Current directory>\jliwhvlnly.exe
- <Current directory>\wlqtbsxwvm.exe
- <Current directory>\drjxcvqcjz.exe
- <Current directory>\jwubkzsqyl.exe
- <Current directory>\tehtlvdgol.exe
- <Current directory>\whyrbymjbk.exe
- <Current directory>\wsmlhadtun.exe
- <Current directory>\jsuisghcej.exe
- nul
- <Current directory>\pyfmbbiisv.exe
- <Current directory>\cqujngmrcj.exe
- <Current directory>\hjdymjewrh.exe
- <Current directory>\rguvhlacox.exe
Deletes the following files
- <Current directory>\pjbfydrsly.exe
- <Current directory>\htsrrlngsk.exe
- <Current directory>\qjfakqhwbk.exe
- <Current directory>\hmokpodqmv.exe
- <Current directory>\tewhalpzvj.exe
- <Current directory>\khfjfqmtzl.exe
- <Current directory>\qnqnnufznx.exe
- <Current directory>\gqsprsksyi.exe
- <Current directory>\jliwhvlnly.exe
- <Current directory>\wlqtbsxwvm.exe
- <Current directory>\drjxcvqcjz.exe
- <Current directory>\jwubkzsqyl.exe
- <Current directory>\tehtlvdgol.exe
- <Current directory>\whyrbymjbk.exe
- <Current directory>\wsmlhadtun.exe
- <Current directory>\jsuisghcej.exe
- <Current directory>\pyfmbbiisv.exe
- <Current directory>\cqujngmrcj.exe
- <Current directory>\ubkuxojxjw.exe
- <Current directory>\hjdymjewrh.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\pjbfydrsly.exe'
- '<Current directory>\ubkuxojxjw.exe'
- '<Current directory>\htsrrlngsk.exe'
- '<Current directory>\qjfakqhwbk.exe'
- '<Current directory>\hmokpodqmv.exe'
- '<Current directory>\tewhalpzvj.exe'
- '<Current directory>\khfjfqmtzl.exe'
- '<Current directory>\qnqnnufznx.exe'
- '<Current directory>\gqsprsksyi.exe'
- '<Current directory>\hjdymjewrh.exe'
- '<Current directory>\jliwhvlnly.exe'
- '<Current directory>\drjxcvqcjz.exe'
- '<Current directory>\jwubkzsqyl.exe'
- '<Current directory>\tehtlvdgol.exe'
- '<Current directory>\whyrbymjbk.exe'
- '<Current directory>\wsmlhadtun.exe'
- '<Current directory>\jsuisghcej.exe'
- '<Current directory>\pyfmbbiisv.exe'
- '<Current directory>\cqujngmrcj.exe'
- '<Current directory>\wlqtbsxwvm.exe'
- '<Current directory>\rguvhlacox.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJDYMJEWRH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UBKUXOJXJW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HTSRRLNGSK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QJFAKQHWBK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HMOKPODQMV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TEWHALPZVJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KHFJFQMTZL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QNQNNUFZNX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GQSPRSKSYI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JLIWHVLNLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WLQTBSXWVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DRJXCVQCJZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JWUBKZSQYL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TEHTLVDGOL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WHYRBYMJBK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WSMLHADTUN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JSUISGHCEJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PYFMBBIISV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CQUJNGMRCJ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PJBFYDRSLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RGUVHLACOX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EFMZWGWTEJ.exe"
