Technical Information
Modifies file system
Creates the following files
- <Current directory>\blatkxqzhk.exe
- <Current directory>\twyfdfmfox.exe
- <Current directory>\gofbocqoyl.exe
- <Current directory>\shnqahcphz.exe
- <Current directory>\cxahbdonpz.exe
- <Current directory>\ppheniawzo.exe
- <Current directory>\cppbzfeyjk.exe
- <Current directory>\mxcsakqwzk.exe
- <Current directory>\igwznlovqz.exe
- <Current directory>\vgdvyiafan.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\peeetrgtyo.exe
- <Current directory>\szndimhotm.exe
- <Current directory>\vcdcypprgl.exe
- <Current directory>\biwghsjxux.exe
- <Current directory>\lqbxixcvky.exe
- nul
- <Current directory>\olswyrlqxo.exe
- <Current directory>\gerijaieea.exe
- <Current directory>\tdklxcvvvm.exe
Deletes the following files
- <Current directory>\blatkxqzhk.exe
- <Current directory>\twyfdfmfox.exe
- <Current directory>\shnqahcphz.exe
- <Current directory>\gofbocqoyl.exe
- <Current directory>\cxahbdonpz.exe
- <Current directory>\ppheniawzo.exe
- <Current directory>\mxcsakqwzk.exe
- <Current directory>\cppbzfeyjk.exe
- <Current directory>\gerijaieea.exe
- <Current directory>\igwznlovqz.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\peeetrgtyo.exe
- <Current directory>\vcdcypprgl.exe
- <Current directory>\szndimhotm.exe
- <Current directory>\biwghsjxux.exe
- <Current directory>\lqbxixcvky.exe
- <Current directory>\olswyrlqxo.exe
- <Current directory>\vgdvyiafan.exe
- <Current directory>\tdklxcvvvm.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\blatkxqzhk.exe'
- '<Current directory>\twyfdfmfox.exe'
- '<Current directory>\gofbocqoyl.exe'
- '<Current directory>\shnqahcphz.exe'
- '<Current directory>\cxahbdonpz.exe'
- '<Current directory>\ppheniawzo.exe'
- '<Current directory>\cppbzfeyjk.exe'
- '<Current directory>\mxcsakqwzk.exe'
- '<Current directory>\gerijaieea.exe'
- '<Current directory>\igwznlovqz.exe'
- '<Current directory>\cmohhmukoa.exe'
- '<Current directory>\peeetrgtyo.exe'
- '<Current directory>\szndimhotm.exe'
- '<Current directory>\vcdcypprgl.exe'
- '<Current directory>\biwghsjxux.exe'
- '<Current directory>\lqbxixcvky.exe'
- '<Current directory>\olswyrlqxo.exe'
- '<Current directory>\vgdvyiafan.exe'
- '<Current directory>\tdklxcvvvm.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TDKLXCVVVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GERIJAIEEA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWYFDFMFOX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GOFBOCQOYL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SHNQAHCPHZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CXAHBDONPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PPHENIAWZO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CPPBZFEYJK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MXCSAKQWZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QITMHAVAAO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IGWZNLOVQZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMOHHMUKOA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PEEETRGTYO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZNDIMHOTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VCDCYPPRGL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIWGHSJXUX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQBXIXCVKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OLSWYRLQXO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BLATKXQZHK.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VGDVYIAFAN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JDAAZWTMLJ.exe"
