Technical Information
Modifies file system
Creates the following files
- <Current directory>\rqonlhaclt.exe
- <Current directory>\sydxsjzvhd.exe
- <Current directory>\fqludodxrs.exe
- <Current directory>\lwwymkfkfe.exe
- <Current directory>\czfaqqbwro.exe
- <Current directory>\pzmxcnofac.exe
- <Current directory>\vexjkrhtpp.exe
- <Current directory>\ixfxwwtuyd.exe
- <Current directory>\snspxsfsgd.exe
- <Current directory>\bvfgywzjwe.exe
- <Current directory>\llkqrtkhee.exe
- <Current directory>\ejkzmbqwcf.exe
- <Current directory>\ozyinykutf.exe
- <Current directory>\ebzsrwggwp.exe
- <Current directory>\rugpdbkpfe.exe
- <Current directory>\emwmoyxyps.exe
- <Current directory>\kshqxbqeee.exe
- nul
- <Current directory>\uiuhygkcuf.exe
- <Current directory>\eyzrrcvtcf.exe
- <Current directory>\cvunnmdcwb.exe
- <Current directory>\pdnqcgqtmf.exe
Deletes the following files
- <Current directory>\rqonlhaclt.exe
- <Current directory>\sydxsjzvhd.exe
- <Current directory>\fqludodxrs.exe
- <Current directory>\lwwymkfkfe.exe
- <Current directory>\czfaqqbwro.exe
- <Current directory>\pzmxcnofac.exe
- <Current directory>\vexjkrhtpp.exe
- <Current directory>\ixfxwwtuyd.exe
- <Current directory>\snspxsfsgd.exe
- <Current directory>\cvunnmdcwb.exe
- <Current directory>\llkqrtkhee.exe
- <Current directory>\ejkzmbqwcf.exe
- <Current directory>\ozyinykutf.exe
- <Current directory>\ebzsrwggwp.exe
- <Current directory>\rugpdbkpfe.exe
- <Current directory>\emwmoyxyps.exe
- <Current directory>\uiuhygkcuf.exe
- <Current directory>\kshqxbqeee.exe
- <Current directory>\eyzrrcvtcf.exe
- <Current directory>\bvfgywzjwe.exe
- <Current directory>\pdnqcgqtmf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\rqonlhaclt.exe'
- '<Current directory>\sydxsjzvhd.exe'
- '<Current directory>\fqludodxrs.exe'
- '<Current directory>\lwwymkfkfe.exe'
- '<Current directory>\czfaqqbwro.exe'
- '<Current directory>\pzmxcnofac.exe'
- '<Current directory>\vexjkrhtpp.exe'
- '<Current directory>\ixfxwwtuyd.exe'
- '<Current directory>\snspxsfsgd.exe'
- '<Current directory>\cvunnmdcwb.exe'
- '<Current directory>\bvfgywzjwe.exe'
- '<Current directory>\ejkzmbqwcf.exe'
- '<Current directory>\ozyinykutf.exe'
- '<Current directory>\ebzsrwggwp.exe'
- '<Current directory>\rugpdbkpfe.exe'
- '<Current directory>\emwmoyxyps.exe'
- '<Current directory>\kshqxbqeee.exe'
- '<Current directory>\uiuhygkcuf.exe'
- '<Current directory>\eyzrrcvtcf.exe'
- '<Current directory>\llkqrtkhee.exe'
- '<Current directory>\pdnqcgqtmf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDNQCGQTMF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CVUNNMDCWB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SYDXSJZVHD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FQLUDODXRS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LWWYMKFKFE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CZFAQQBWRO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PZMXCNOFAC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VEXJKRHTPP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IXFXWWTUYD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SNSPXSFSGD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CKFBQJMRDQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BVFGYWZJWE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EJKZMBQWCF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OZYINYKUTF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EBZSRWGGWP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RUGPDBKPFE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EMWMOYXYPS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KSHQXBQEEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UIUHYGKCUF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EYZRRCVTCF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RQONLHACLT.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LLKQRTKHEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SUSKPFATVQ.exe"
