Technical Information
Modifies file system
Creates the following files
- <Current directory>\evohutoknq.exe
- <Current directory>\gvrcyyeoud.exe
- <Current directory>\tozzsdiyer.exe
- <Current directory>\cdmrlzcour.exe
- <Current directory>\mlzimdomcs.exe
- <Current directory>\meocjgexvc.exe
- <Current directory>\skzgsjxkkp.exe
- <Current directory>\fcocmgkltd.exe
- <Current directory>\tvkgmbsnlo.exe
- <Current directory>\vfpeiegffn.exe
- <Current directory>\fgrpoliogq.exe
- <Current directory>\llkupoktuc.exe
- <Current directory>\ymrqjlocer.exe
- <Current directory>\bhipzoxxzp.exe
- <Current directory>\fcroprgauo.exe
- nul
- <Current directory>\rcglaokbdc.exe
- <Current directory>\snktvgefwc.exe
- <Current directory>\tkvupyjvre.exe
Deletes the following files
- <Current directory>\evohutoknq.exe
- <Current directory>\gvrcyyeoud.exe
- <Current directory>\tozzsdiyer.exe
- <Current directory>\cdmrlzcour.exe
- <Current directory>\mlzimdomcs.exe
- <Current directory>\meocjgexvc.exe
- <Current directory>\skzgsjxkkp.exe
- <Current directory>\fcocmgkltd.exe
- <Current directory>\vfpeiegffn.exe
- <Current directory>\snktvgefwc.exe
- <Current directory>\fgrpoliogq.exe
- <Current directory>\llkupoktuc.exe
- <Current directory>\ymrqjlocer.exe
- <Current directory>\bhipzoxxzp.exe
- <Current directory>\fcroprgauo.exe
- <Current directory>\rcglaokbdc.exe
- <Current directory>\tvkgmbsnlo.exe
- <Current directory>\tkvupyjvre.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\evohutoknq.exe'
- '<Current directory>\gvrcyyeoud.exe'
- '<Current directory>\tozzsdiyer.exe'
- '<Current directory>\cdmrlzcour.exe'
- '<Current directory>\mlzimdomcs.exe'
- '<Current directory>\meocjgexvc.exe'
- '<Current directory>\skzgsjxkkp.exe'
- '<Current directory>\fcocmgkltd.exe'
- '<Current directory>\vfpeiegffn.exe'
- '<Current directory>\snktvgefwc.exe'
- '<Current directory>\fgrpoliogq.exe'
- '<Current directory>\llkupoktuc.exe'
- '<Current directory>\ymrqjlocer.exe'
- '<Current directory>\bhipzoxxzp.exe'
- '<Current directory>\fcroprgauo.exe'
- '<Current directory>\rcglaokbdc.exe'
- '<Current directory>\tvkgmbsnlo.exe'
- '<Current directory>\tkvupyjvre.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TVKGMBSNLO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GVRCYYEOUD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TOZZSDIYER.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CDMRLZCOUR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MLZIMDOMCS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MEOCJGEXVC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKZGSJXKKP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCOCMGKLTD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TKVUPYJVRE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VFPEIEGFFN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FGRPOLIOGQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LLKUPOKTUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YMRQJLOCER.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHIPZOXXZP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCROPRGAUO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RCGLAOKBDC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVOHUTOKNQ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SNKTVGEFWC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TRZBJWTLYB.exe"
