Technical Information
Modifies file system
Creates the following files
- <Current directory>\bzvxdpxdpd.exe
- <Current directory>\neaxfcsdzd.exe
- <Current directory>\aeitrzwejs.exe
- <Current directory>\jmvdsdqczs.exe
- <Current directory>\wmczeauljo.exe
- <Current directory>\zhtyuddgwf.exe
- <Current directory>\gnekchwmkr.exe
- <Current directory>\pdrcedqkar.exe
- <Current directory>\cvyrpiutko.exe
- <Current directory>\mlmiqfokso.exe
- <Current directory>\srxurihxga.exe
- <Current directory>\zwiyamjdvf.exe
- <Current directory>\ievqbiuclf.exe
- <Current directory>\vfcmmnhdub.exe
- <Current directory>\fnpwnksbkc.exe
- <Current directory>\sfwtzpfkuq.exe
- <Current directory>\vinrpsffho.exe
- nul
- <Current directory>\fqajqozvxp.exe
- <Current directory>\pggajslufp.exe
- <Current directory>\altauxouqp.exe
- <Current directory>\ntmdaaclgb.exe
Deletes the following files
- <Current directory>\bzvxdpxdpd.exe
- <Current directory>\jmvdsdqczs.exe
- <Current directory>\aeitrzwejs.exe
- <Current directory>\wmczeauljo.exe
- <Current directory>\zhtyuddgwf.exe
- <Current directory>\gnekchwmkr.exe
- <Current directory>\pdrcedqkar.exe
- <Current directory>\cvyrpiutko.exe
- <Current directory>\srxurihxga.exe
- <Current directory>\mlmiqfokso.exe
- <Current directory>\zwiyamjdvf.exe
- <Current directory>\ievqbiuclf.exe
- <Current directory>\vfcmmnhdub.exe
- <Current directory>\fnpwnksbkc.exe
- <Current directory>\vinrpsffho.exe
- <Current directory>\sfwtzpfkuq.exe
- <Current directory>\fqajqozvxp.exe
- <Current directory>\pggajslufp.exe
- <Current directory>\neaxfcsdzd.exe
- <Current directory>\altauxouqp.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\bzvxdpxdpd.exe'
- '<Current directory>\neaxfcsdzd.exe'
- '<Current directory>\aeitrzwejs.exe'
- '<Current directory>\jmvdsdqczs.exe'
- '<Current directory>\wmczeauljo.exe'
- '<Current directory>\zhtyuddgwf.exe'
- '<Current directory>\gnekchwmkr.exe'
- '<Current directory>\pdrcedqkar.exe'
- '<Current directory>\cvyrpiutko.exe'
- '<Current directory>\altauxouqp.exe'
- '<Current directory>\mlmiqfokso.exe'
- '<Current directory>\zwiyamjdvf.exe'
- '<Current directory>\ievqbiuclf.exe'
- '<Current directory>\vfcmmnhdub.exe'
- '<Current directory>\fnpwnksbkc.exe'
- '<Current directory>\sfwtzpfkuq.exe'
- '<Current directory>\vinrpsffho.exe'
- '<Current directory>\fqajqozvxp.exe'
- '<Current directory>\pggajslufp.exe'
- '<Current directory>\srxurihxga.exe'
- '<Current directory>\ntmdaaclgb.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QSVVQWVBVC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AIINRSHZDC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NAPKDXLANQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XQCBEUFZDR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTMDAACLGB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALTAUXOUQP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NEAXFCSDZD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AEITRZWEJS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JMVDSDQCZS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WMCZEAULJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZHTYUDDGWF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GNEKCHWMKR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HKQMXSCDFB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDRCEDQKAR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MLMIQFOKSO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SRXURIHXGA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZWIYAMJDVF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IEVQBIUCLF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VFCMMNHDUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FNPWNKSBKC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SFWTZPFKUQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VINRPSFFHO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FQAJQOZVXP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PGGAJSLUFP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BZVXDPXDPD.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CVYRPIUTKO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XUCVWNQMXB.exe"
