Technical Information
Modifies file system
Creates the following files
- <Current directory>\vjwwaewlrz.exe
- <Current directory>\kksvalaoxy.exe
- <Current directory>\wczrmqepgm.exe
- <Current directory>\nfjbqobjjo.exe
- <Current directory>\wvwljsvazx.exe
- <Current directory>\dahxsownob.exe
- <Current directory>\qtoudtawyx.exe
- <Current directory>\mbjaqvywxm.exe
- <Current directory>\zbqxkscxha.exe
- <Current directory>\wkllptaezx.exe
- <Current directory>\gsyuqxmvpx.exe
- <Current directory>\ssfrcuyeyl.exe
- <Current directory>\sdulhxposo.exe
- <Current directory>\vykjxapjem.exe
- <Current directory>\iysgjfcsob.exe
- nul
- <Current directory>\vrzducgbyp.exe
- <Current directory>\mtjfzhcnjz.exe
- <Current directory>\acflzpgqgx.exe
- <Current directory>\xyomjmgvuz.exe
Deletes the following files
- <Current directory>\vjwwaewlrz.exe
- <Current directory>\nfjbqobjjo.exe
- <Current directory>\wvwljsvazx.exe
- <Current directory>\dahxsownob.exe
- <Current directory>\qtoudtawyx.exe
- <Current directory>\mbjaqvywxm.exe
- <Current directory>\zbqxkscxha.exe
- <Current directory>\wczrmqepgm.exe
- <Current directory>\wkllptaezx.exe
- <Current directory>\sdulhxposo.exe
- <Current directory>\ssfrcuyeyl.exe
- <Current directory>\vykjxapjem.exe
- <Current directory>\iysgjfcsob.exe
- <Current directory>\vrzducgbyp.exe
- <Current directory>\mtjfzhcnjz.exe
- <Current directory>\gsyuqxmvpx.exe
- <Current directory>\kksvalaoxy.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\vjwwaewlrz.exe'
- '<Current directory>\kksvalaoxy.exe'
- '<Current directory>\wczrmqepgm.exe'
- '<Current directory>\nfjbqobjjo.exe'
- '<Current directory>\wvwljsvazx.exe'
- '<Current directory>\dahxsownob.exe'
- '<Current directory>\qtoudtawyx.exe'
- '<Current directory>\mbjaqvywxm.exe'
- '<Current directory>\acflzpgqgx.exe'
- '<Current directory>\zbqxkscxha.exe'
- '<Current directory>\gsyuqxmvpx.exe'
- '<Current directory>\ssfrcuyeyl.exe'
- '<Current directory>\sdulhxposo.exe'
- '<Current directory>\vykjxapjem.exe'
- '<Current directory>\iysgjfcsob.exe'
- '<Current directory>\vrzducgbyp.exe'
- '<Current directory>\mtjfzhcnjz.exe'
- '<Current directory>\wkllptaezx.exe'
- '<Current directory>\xyomjmgvuz.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ACFLZPGQGX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KKSVALAOXY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCZRMQEPGM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NFJBQOBJJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WVWLJSVAZX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DAHXSOWNOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QTOUDTAWYX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MBJAQVYWXM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZBQXKSCXHA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WKLLPTAEZX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GSYUQXMVPX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SSFRCUYEYL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDULHXPOSO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYKJXAPJEM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IYSGJFCSOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VRZDUCGBYP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MTJFZHCNJZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VJWWAEWLRZ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYOMJMGVUZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KGHQXHTMKL.exe"
