Technical Information
Modifies file system
Creates the following files
- <Current directory>\hzcjpehnkq.exe
- <Current directory>\fpmzqqxgxh.exe
- <Current directory>\lufdzuylmt.exe
- <Current directory>\ynmakrcvvp.exe
- <Current directory>\bidzaulpqg.exe
- <Current directory>\oikwmzpzau.exe
- <Current directory>\bbssywcikq.exe
- <Current directory>\sdbccuyunt.exe
- <Current directory>\btgmdyssdt.exe
- <Current directory>\epxltbtnqr.exe
- <Current directory>\luixcfuaee.exe
- <Current directory>\ymxtncycos.exe
- <Current directory>\hccdpgsaes.exe
- <Current directory>\rkquqceqmt.exe
- nul
- <Current directory>\ewtlzkykps.exe
- <Current directory>\cbghvlgtrg.exe
- <Current directory>\ftmtikitsr.exe
Deletes the following files
- <Current directory>\hzcjpehnkq.exe
- <Current directory>\fpmzqqxgxh.exe
- <Current directory>\lufdzuylmt.exe
- <Current directory>\bidzaulpqg.exe
- <Current directory>\ynmakrcvvp.exe
- <Current directory>\oikwmzpzau.exe
- <Current directory>\sdbccuyunt.exe
- <Current directory>\cbghvlgtrg.exe
- <Current directory>\bbssywcikq.exe
- <Current directory>\btgmdyssdt.exe
- <Current directory>\luixcfuaee.exe
- <Current directory>\ymxtncycos.exe
- <Current directory>\hccdpgsaes.exe
- <Current directory>\rkquqceqmt.exe
- <Current directory>\ewtlzkykps.exe
- <Current directory>\epxltbtnqr.exe
- <Current directory>\ftmtikitsr.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\hzcjpehnkq.exe'
- '<Current directory>\fpmzqqxgxh.exe'
- '<Current directory>\lufdzuylmt.exe'
- '<Current directory>\ynmakrcvvp.exe'
- '<Current directory>\bidzaulpqg.exe'
- '<Current directory>\oikwmzpzau.exe'
- '<Current directory>\bbssywcikq.exe'
- '<Current directory>\cbghvlgtrg.exe'
- '<Current directory>\sdbccuyunt.exe'
- '<Current directory>\epxltbtnqr.exe'
- '<Current directory>\luixcfuaee.exe'
- '<Current directory>\ymxtncycos.exe'
- '<Current directory>\hccdpgsaes.exe'
- '<Current directory>\rkquqceqmt.exe'
- '<Current directory>\ewtlzkykps.exe'
- '<Current directory>\btgmdyssdt.exe'
- '<Current directory>\ftmtikitsr.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MYULGCNSOT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WGZDHHZQWT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JRDTYGBCZS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JKRMVIKUSD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FTMTIKITSR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CBGHVLGTRG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FPMZQQXGXH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LUFDZUYLMT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YNMAKRCVVP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIDZAULPQG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TSTKLCHDPS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OIKWMZPZAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDBCCUYUNT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BTGMDYSSDT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EPXLTBTNQR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LUIXCFUAEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YMXTNCYCOS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HCCDPGSAES.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RKQUQCEQMT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EWTLZKYKPS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZCJPEHNKQ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BBSSYWCIKQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QXDMVZZIVU.exe"
