Technical Information
Modifies file system
Creates the following files
- <Current directory>\xypokfojby.exe
- <Current directory>\hjoadnlxak.exe
- <Current directory>\kmfytptsnb.exe
- <Current directory>\tukimufqdb.exe
- <Current directory>\aaduvpgwro.exe
- <Current directory>\qcewzvdquy.exe
- <Current directory>\asrnaspoky.exe
- <Current directory>\vlzkmxbpum.exe
- <Current directory>\aldnujjjly.exe
- <Current directory>\bqsousudiz.exe
- <Current directory>\yzechcscin.exe
- <Current directory>\eexhqxuixa.exe
- <Current directory>\xcphkyzfvb.exe
- <Current directory>\eiautcskjn.exe
- <Current directory>\hlrsjfbfwl.exe
- nul
- <Current directory>\nqkxrictky.exe
- <Current directory>\lgxgnxotyz.exe
- <Current directory>\kjtlqlnxao.exe
Deletes the following files
- <Current directory>\xypokfojby.exe
- <Current directory>\hjoadnlxak.exe
- <Current directory>\kmfytptsnb.exe
- <Current directory>\tukimufqdb.exe
- <Current directory>\aaduvpgwro.exe
- <Current directory>\qcewzvdquy.exe
- <Current directory>\asrnaspoky.exe
- <Current directory>\vlzkmxbpum.exe
- <Current directory>\bqsousudiz.exe
- <Current directory>\lgxgnxotyz.exe
- <Current directory>\yzechcscin.exe
- <Current directory>\eexhqxuixa.exe
- <Current directory>\xcphkyzfvb.exe
- <Current directory>\eiautcskjn.exe
- <Current directory>\hlrsjfbfwl.exe
- <Current directory>\nqkxrictky.exe
- <Current directory>\aldnujjjly.exe
- <Current directory>\kjtlqlnxao.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\xypokfojby.exe'
- '<Current directory>\hjoadnlxak.exe'
- '<Current directory>\kmfytptsnb.exe'
- '<Current directory>\tukimufqdb.exe'
- '<Current directory>\aaduvpgwro.exe'
- '<Current directory>\qcewzvdquy.exe'
- '<Current directory>\asrnaspoky.exe'
- '<Current directory>\vlzkmxbpum.exe'
- '<Current directory>\bqsousudiz.exe'
- '<Current directory>\lgxgnxotyz.exe'
- '<Current directory>\yzechcscin.exe'
- '<Current directory>\eexhqxuixa.exe'
- '<Current directory>\xcphkyzfvb.exe'
- '<Current directory>\eiautcskjn.exe'
- '<Current directory>\hlrsjfbfwl.exe'
- '<Current directory>\nqkxrictky.exe'
- '<Current directory>\aldnujjjly.exe'
- '<Current directory>\kjtlqlnxao.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALDNUJJJLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJOADNLXAK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KMFYTPTSNB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TUKIMUFQDB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AADUVPGWRO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QCEWZVDQUY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ASRNASPOKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VLZKMXBPUM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KJTLQLNXAO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BQSOUSUDIZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YZECHCSCIN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EEXHQXUIXA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XCPHKYZFVB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EIAUTCSKJN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HLRSJFBFWL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NQKXRICTKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYPOKFOJBY.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LGXGNXOTYZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDIHIITKMB.exe"
