Technical Information
Modifies file system
Creates the following files
- <Current directory>\bfggabaziz.exe
- <Current directory>\rdblwkhjcn.exe
- <Current directory>\edihiitkmb.exe
- <Current directory>\ugkjmnqdxm.exe
- <Current directory>\hyzgykunga.exe
- <Current directory>\urhdjpgoqo.exe
- <Current directory>\hjoadnlxak.exe
- <Current directory>\npzeeqmcop.exe
- <Current directory>\xemvfnybwx.exe
- <Current directory>\guzfgrjzmx.exe
- <Current directory>\qcewzvdquy.exe
- <Current directory>\ddutlshzem.exe
- <Current directory>\oycsjvquzl.exe
- <Current directory>\yopjcacshl.exe
- <Current directory>\oboflaxwly.exe
- <Current directory>\rfedbcyrgo.exe
- nul
- <Current directory>\uavcrfhmtn.exe
- <Current directory>\ekmocfdzsz.exe
- <Current directory>\rserrirqjl.exe
Deletes the following files
- <Current directory>\bfggabaziz.exe
- <Current directory>\ugkjmnqdxm.exe
- <Current directory>\hyzgykunga.exe
- <Current directory>\hjoadnlxak.exe
- <Current directory>\urhdjpgoqo.exe
- <Current directory>\npzeeqmcop.exe
- <Current directory>\xemvfnybwx.exe
- <Current directory>\edihiitkmb.exe
- <Current directory>\guzfgrjzmx.exe
- <Current directory>\ddutlshzem.exe
- <Current directory>\oycsjvquzl.exe
- <Current directory>\yopjcacshl.exe
- <Current directory>\oboflaxwly.exe
- <Current directory>\rfedbcyrgo.exe
- <Current directory>\uavcrfhmtn.exe
- <Current directory>\qcewzvdquy.exe
- <Current directory>\rdblwkhjcn.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\bfggabaziz.exe'
- '<Current directory>\rdblwkhjcn.exe'
- '<Current directory>\edihiitkmb.exe'
- '<Current directory>\ugkjmnqdxm.exe'
- '<Current directory>\hyzgykunga.exe'
- '<Current directory>\urhdjpgoqo.exe'
- '<Current directory>\hjoadnlxak.exe'
- '<Current directory>\npzeeqmcop.exe'
- '<Current directory>\ekmocfdzsz.exe'
- '<Current directory>\xemvfnybwx.exe'
- '<Current directory>\qcewzvdquy.exe'
- '<Current directory>\ddutlshzem.exe'
- '<Current directory>\oycsjvquzl.exe'
- '<Current directory>\yopjcacshl.exe'
- '<Current directory>\oboflaxwly.exe'
- '<Current directory>\rfedbcyrgo.exe'
- '<Current directory>\uavcrfhmtn.exe'
- '<Current directory>\guzfgrjzmx.exe'
- '<Current directory>\rserrirqjl.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EKMOCFDZSZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RDBLWKHJCN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDIHIITKMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UGKJMNQDXM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HYZGYKUNGA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\URHDJPGOQO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJOADNLXAK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPZEEQMCOP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XEMVFNYBWX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GUZFGRJZMX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QCEWZVDQUY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DDUTLSHZEM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OYCSJVQUZL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YOPJCACSHL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OBOFLAXWLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RFEDBCYRGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UAVCRFHMTN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BFGGABAZIZ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RSERRIRQJL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HCZAPEFABK.exe"
