Technical Information
Modifies file system
Creates the following files
- <Current directory>\ltnklbbqxl.exe
- <Current directory>\zjvpgyxajy.exe
- <Current directory>\pmwrketumb.exe
- <Current directory>\cmlowbydwx.exe
- <Current directory>\cxahbdonpz.exe
- <Current directory>\mnnzuhimfa.exe
- <Current directory>\zfuwgfmnpw.exe
- <Current directory>\mxcsakqwzk.exe
- <Current directory>\zyjplhcfiz.exe
- <Current directory>\fdctukwlxl.exe
- <Current directory>\swjqgpiugz.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\soyjlkqeak.exe
- <Current directory>\cwlbeokuik.exe
- <Current directory>\lmykfswtyk.exe
- <Current directory>\vcdcypprgl.exe
- <Current directory>\ivlzsuuspz.exe
- <Current directory>\yyubwsymbj.exe
- <Current directory>\edffxvsspo.exe
- nul
- <Current directory>\ljyrgztfea.exe
- <Current directory>\urdahvfwma.exe
- <Current directory>\jglncasoyw.exe
- <Current directory>\woeqqdofoa.exe
Deletes the following files
- <Current directory>\ltnklbbqxl.exe
- <Current directory>\jglncasoyw.exe
- <Current directory>\pmwrketumb.exe
- <Current directory>\cmlowbydwx.exe
- <Current directory>\cxahbdonpz.exe
- <Current directory>\mnnzuhimfa.exe
- <Current directory>\zfuwgfmnpw.exe
- <Current directory>\mxcsakqwzk.exe
- <Current directory>\zyjplhcfiz.exe
- <Current directory>\fdctukwlxl.exe
- <Current directory>\zjvpgyxajy.exe
- <Current directory>\swjqgpiugz.exe
- <Current directory>\soyjlkqeak.exe
- <Current directory>\cwlbeokuik.exe
- <Current directory>\lmykfswtyk.exe
- <Current directory>\ivlzsuuspz.exe
- <Current directory>\vcdcypprgl.exe
- <Current directory>\yyubwsymbj.exe
- <Current directory>\edffxvsspo.exe
- <Current directory>\ljyrgztfea.exe
- <Current directory>\urdahvfwma.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\woeqqdofoa.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ltnklbbqxl.exe'
- '<Current directory>\zjvpgyxajy.exe'
- '<Current directory>\pmwrketumb.exe'
- '<Current directory>\cmlowbydwx.exe'
- '<Current directory>\cxahbdonpz.exe'
- '<Current directory>\mnnzuhimfa.exe'
- '<Current directory>\zfuwgfmnpw.exe'
- '<Current directory>\mxcsakqwzk.exe'
- '<Current directory>\zyjplhcfiz.exe'
- '<Current directory>\fdctukwlxl.exe'
- '<Current directory>\jglncasoyw.exe'
- '<Current directory>\swjqgpiugz.exe'
- '<Current directory>\soyjlkqeak.exe'
- '<Current directory>\cwlbeokuik.exe'
- '<Current directory>\lmykfswtyk.exe'
- '<Current directory>\vcdcypprgl.exe'
- '<Current directory>\ivlzsuuspz.exe'
- '<Current directory>\yyubwsymbj.exe'
- '<Current directory>\edffxvsspo.exe'
- '<Current directory>\ljyrgztfea.exe'
- '<Current directory>\urdahvfwma.exe'
- '<Current directory>\cmohhmukoa.exe'
- '<Current directory>\woeqqdofoa.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZJVPGYXAJY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMWRKETUMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMLOWBYDWX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CXAHBDONPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MNNZUHIMFA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZFUWGFMNPW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MXCSAKQWZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYJPLHCFIZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FDCTUKWLXL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SWJQGPIUGZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGLNCASOYW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMOHHMUKOA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWLBEOKUIK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LMYKFSWTYK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VCDCYPPRGL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IVLZSUUSPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YYUBWSYMBJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDFFXVSSPO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LJYRGZTFEA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\URDAHVFWMA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LTNKLBBQXL.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SOYJLKQEAK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WOEQQDOFOA.exe"
