Technical Information
Modifies file system
Creates the following files
- <Current directory>\zzwdliqkqo.exe
- <Current directory>\esnjklaofm.exe
- <Current directory>\niablpuenm.exe
- <Current directory>\xyfkelgddm.exe
- <Current directory>\hfscfqzbln.exe
- <Current directory>\kjjbvtawgl.exe
- <Current directory>\xbqxhqmfqz.exe
- <Current directory>\awhwftnady.exe
- <Current directory>\rzgnyowfwx.exe
- <Current directory>\drydvvwvyo.exe
- <Current directory>\qculmvroan.exe
- <Current directory>\ashdfzknrn.exe
- <Current directory>\jiuugdwdzo.exe
- <Current directory>\meltwyfgtm.exe
- nul
- <Current directory>\mwamcavqnp.exe
- <Current directory>\prrlsdwlan.exe
- <Current directory>\jxjhdzxjmb.exe
- <Current directory>\hjsdxjcpgx.exe
Deletes the following files
- <Current directory>\zzwdliqkqo.exe
- <Current directory>\xyfkelgddm.exe
- <Current directory>\niablpuenm.exe
- <Current directory>\hfscfqzbln.exe
- <Current directory>\kjjbvtawgl.exe
- <Current directory>\xbqxhqmfqz.exe
- <Current directory>\awhwftnady.exe
- <Current directory>\esnjklaofm.exe
- <Current directory>\drydvvwvyo.exe
- <Current directory>\qculmvroan.exe
- <Current directory>\ashdfzknrn.exe
- <Current directory>\jiuugdwdzo.exe
- <Current directory>\meltwyfgtm.exe
- <Current directory>\mwamcavqnp.exe
- <Current directory>\prrlsdwlan.exe
- <Current directory>\jxjhdzxjmb.exe
- <Current directory>\hjsdxjcpgx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\zzwdliqkqo.exe'
- '<Current directory>\esnjklaofm.exe'
- '<Current directory>\niablpuenm.exe'
- '<Current directory>\xyfkelgddm.exe'
- '<Current directory>\hfscfqzbln.exe'
- '<Current directory>\kjjbvtawgl.exe'
- '<Current directory>\xbqxhqmfqz.exe'
- '<Current directory>\awhwftnady.exe'
- '<Current directory>\drydvvwvyo.exe'
- '<Current directory>\jxjhdzxjmb.exe'
- '<Current directory>\qculmvroan.exe'
- '<Current directory>\ashdfzknrn.exe'
- '<Current directory>\jiuugdwdzo.exe'
- '<Current directory>\meltwyfgtm.exe'
- '<Current directory>\mwamcavqnp.exe'
- '<Current directory>\prrlsdwlan.exe'
- '<Current directory>\rzgnyowfwx.exe'
- '<Current directory>\hjsdxjcpgx.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LUKPNZHKPA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VKPHGESJXB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHITOZUOLN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BAWEUBCHEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQJWNGWXVY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RWUAVJPLJK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BEIRXGJBRL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJSDXJCPGX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RZGNYOWFWX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ESNJKLAOFM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIABLPUENM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYFKELGDDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FORLEWFFAO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HFSCFQZBLN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XBQXHQMFQZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AWHWFTNADY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DRYDVVWVYO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JXJHDZXJMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QCULMVROAN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ASHDFZKNRN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JIUUGDWDZO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MELTWYFGTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MWAMCAVQNP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PRRLSDWLAN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZZWDLIQKQO.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KJJBVTAWGL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YJGHWAERMJ.exe"
