Technical Information
Modifies file system
Creates the following files
- <Current directory>\dzpshivnpi.exe
- <Current directory>\udcpxsakhx.exe
- <Current directory>\lfdzcqfwkz.exe
- <Current directory>\yytwnvjfcv.exe
- <Current directory>\lyalhsnomk.exe
- <Current directory>\bbbvlysapm.exe
- <Current directory>\relxpwpuaw.exe
- <Current directory>\ewsubbtdkk.exe
- <Current directory>\kclykwujyx.exe
- <Current directory>\aenaocrdcz.exe
- <Current directory>\oxrlpohxtk.exe
- <Current directory>\hkymxysiql.exe
- <Current directory>\dsssbzqqqi.exe
- <Current directory>\uvccgfnctk.exe
- <Current directory>\kylekdjvem.exe
- <Current directory>\abngojophx.exe
- <Current directory>\hggkxehvwj.exe
- <Current directory>\qolcyjbtmj.exe
- nul
- <Current directory>\dpszkgfuvy.exe
- <Current directory>\qhhvvljdfm.exe
- <Current directory>\xnhobdpcbw.exe
- <Current directory>\eheuwsngdk.exe
Deletes the following files
- <Current directory>\dzpshivnpi.exe
- <Current directory>\lfdzcqfwkz.exe
- <Current directory>\lyalhsnomk.exe
- <Current directory>\yytwnvjfcv.exe
- <Current directory>\relxpwpuaw.exe
- <Current directory>\ewsubbtdkk.exe
- <Current directory>\bbbvlysapm.exe
- <Current directory>\kclykwujyx.exe
- <Current directory>\aenaocrdcz.exe
- <Current directory>\udcpxsakhx.exe
- <Current directory>\hkymxysiql.exe
- <Current directory>\xnhobdpcbw.exe
- <Current directory>\uvccgfnctk.exe
- <Current directory>\kylekdjvem.exe
- <Current directory>\abngojophx.exe
- <Current directory>\qolcyjbtmj.exe
- <Current directory>\hggkxehvwj.exe
- <Current directory>\dpszkgfuvy.exe
- <Current directory>\qhhvvljdfm.exe
- <Current directory>\dsssbzqqqi.exe
- <Current directory>\oxrlpohxtk.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\dzpshivnpi.exe'
- '<Current directory>\udcpxsakhx.exe'
- '<Current directory>\lfdzcqfwkz.exe'
- '<Current directory>\yytwnvjfcv.exe'
- '<Current directory>\lyalhsnomk.exe'
- '<Current directory>\bbbvlysapm.exe'
- '<Current directory>\relxpwpuaw.exe'
- '<Current directory>\ewsubbtdkk.exe'
- '<Current directory>\kclykwujyx.exe'
- '<Current directory>\aenaocrdcz.exe'
- '<Current directory>\hkymxysiql.exe'
- '<Current directory>\xnhobdpcbw.exe'
- '<Current directory>\dsssbzqqqi.exe'
- '<Current directory>\uvccgfnctk.exe'
- '<Current directory>\kylekdjvem.exe'
- '<Current directory>\abngojophx.exe'
- '<Current directory>\hggkxehvwj.exe'
- '<Current directory>\qolcyjbtmj.exe'
- '<Current directory>\dpszkgfuvy.exe'
- '<Current directory>\qhhvvljdfm.exe'
- '<Current directory>\oxrlpohxtk.exe'
- '<Current directory>\eheuwsngdk.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LFDZCQFWKZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YYTWNVJFCV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LYALHSNOMK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BBBVLYSAPM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RELXPWPUAW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EWSUBBTDKK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KCLYKWUJYX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AENAOCRDCZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HKYMXYSIQL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UDCPXSAKHX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XNHOBDPCBW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UVCCGFNCTK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KYLEKDJVEM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ABNGOJOPHX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HGGKXEHVWJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QOLCYJBTMJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DPSZKGFUVY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHHVVLJDFM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DZPSHIVNPI.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DSSSBZQQQI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXRLPOHXTK.exe"
