Technical Information
Modifies file system
Creates the following files
- <Current directory>\oeceqotbwr.exe
- <Current directory>\gpbhbwppve.exe
- <Current directory>\thiemtuqes.exe
- <Current directory>\dxvwnynpus.exe
- <Current directory>\jdgaobhujf.exe
- <Current directory>\zgqkszlomp.exe
- <Current directory>\myxgmwpxwd.exe
- <Current directory>\cbgiqcmrhf.exe
- <Current directory>\jgrnzgnxvs.exe
- <Current directory>\swfesczvds.exe
- <Current directory>\cekvtgtltt.exe
- <Current directory>\pfzsfdxudh.exe
- <Current directory>\fhbujjuggr.exe
- <Current directory>\icrtzedjbp.exe
- <Current directory>\vvzqljhsle.exe
- <Current directory>\yyppjmqnyc.exe
- <Current directory>\lqxlujuwhq.exe
- <Current directory>\swipdnvcwd.exe
- nul
- <Current directory>\foxmpkzlfr.exe
- <Current directory>\dukjlthmif.exe
- <Current directory>\texzjpvwsf.exe
Deletes the following files
- <Current directory>\oeceqotbwr.exe
- <Current directory>\gpbhbwppve.exe
- <Current directory>\dxvwnynpus.exe
- <Current directory>\jdgaobhujf.exe
- <Current directory>\zgqkszlomp.exe
- <Current directory>\myxgmwpxwd.exe
- <Current directory>\cbgiqcmrhf.exe
- <Current directory>\jgrnzgnxvs.exe
- <Current directory>\swfesczvds.exe
- <Current directory>\cekvtgtltt.exe
- <Current directory>\pfzsfdxudh.exe
- <Current directory>\fhbujjuggr.exe
- <Current directory>\icrtzedjbp.exe
- <Current directory>\vvzqljhsle.exe
- <Current directory>\yyppjmqnyc.exe
- <Current directory>\lqxlujuwhq.exe
- <Current directory>\foxmpkzlfr.exe
- <Current directory>\swipdnvcwd.exe
- <Current directory>\thiemtuqes.exe
- <Current directory>\dukjlthmif.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\oeceqotbwr.exe'
- '<Current directory>\gpbhbwppve.exe'
- '<Current directory>\thiemtuqes.exe'
- '<Current directory>\dxvwnynpus.exe'
- '<Current directory>\jdgaobhujf.exe'
- '<Current directory>\zgqkszlomp.exe'
- '<Current directory>\myxgmwpxwd.exe'
- '<Current directory>\cbgiqcmrhf.exe'
- '<Current directory>\jgrnzgnxvs.exe'
- '<Current directory>\dukjlthmif.exe'
- '<Current directory>\swfesczvds.exe'
- '<Current directory>\pfzsfdxudh.exe'
- '<Current directory>\fhbujjuggr.exe'
- '<Current directory>\icrtzedjbp.exe'
- '<Current directory>\vvzqljhsle.exe'
- '<Current directory>\yyppjmqnyc.exe'
- '<Current directory>\lqxlujuwhq.exe'
- '<Current directory>\swipdnvcwd.exe'
- '<Current directory>\foxmpkzlfr.exe'
- '<Current directory>\cekvtgtltt.exe'
- '<Current directory>\texzjpvwsf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TEXZJPVWSF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DUKJLTHMIF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GPBHBWPPVE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\THIEMTUQES.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DXVWNYNPUS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JDGAOBHUJF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZGQKSZLOMP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MYXGMWPXWD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CBGIQCMRHF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGRNZGNXVS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GLPCYSJNIR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SWFESCZVDS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PFZSFDXUDH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FHBUJJUGGR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ICRTZEDJBP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VVZQLJHSLE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YYPPJMQNYC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQXLUJUWHQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SWIPDNVCWD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FOXMPKZLFR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OECEQOTBWR.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CEKVTGTLTT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AGFQPOPHUE.exe"
