Technical Information
Modifies file system
Creates the following files
- <Current directory>\xmtthrsozh.exe
- <Current directory>\fhfnzuvlqt.exe
- <Current directory>\pxkeazocyt.exe
- <Current directory>\cpzbmwtlii.exe
- <Current directory>\fliaczbgdg.exe
- <Current directory>\obvjddnetg.exe
- <Current directory>\btdgpazfcv.exe
- <Current directory>\otsdafeomr.exe
- <Current directory>\bmzzmcixwf.exe
- <Current directory>\irkmugjdks.exe
- <Current directory>\lmbkkjsyxi.exe
- <Current directory>\rsmptflmlv.exe
- <Current directory>\bizgujfcbv.exe
- <Current directory>\edqfkmgfot.exe
- <Current directory>\kjbjthhldg.exe
- <Current directory>\nesijkqnye.exe
- nul
- <Current directory>\kmmwvmgnpt.exe
- <Current directory>\spyqnxqcgf.exe
- <Current directory>\fwittsetxq.exe
Deletes the following files
- <Current directory>\xmtthrsozh.exe
- <Current directory>\kmmwvmgnpt.exe
- <Current directory>\nesijkqnye.exe
- <Current directory>\kjbjthhldg.exe
- <Current directory>\edqfkmgfot.exe
- <Current directory>\bizgujfcbv.exe
- <Current directory>\rsmptflmlv.exe
- <Current directory>\lmbkkjsyxi.exe
- <Current directory>\irkmugjdks.exe
- <Current directory>\bmzzmcixwf.exe
- <Current directory>\otsdafeomr.exe
- <Current directory>\btdgpazfcv.exe
- <Current directory>\obvjddnetg.exe
- <Current directory>\cpzbmwtlii.exe
- <Current directory>\fliaczbgdg.exe
- <Current directory>\pxkeazocyt.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\xmtthrsozh.exe'
- '<Current directory>\fhfnzuvlqt.exe'
- '<Current directory>\pxkeazocyt.exe'
- '<Current directory>\cpzbmwtlii.exe'
- '<Current directory>\fliaczbgdg.exe'
- '<Current directory>\obvjddnetg.exe'
- '<Current directory>\btdgpazfcv.exe'
- '<Current directory>\otsdafeomr.exe'
- '<Current directory>\spyqnxqcgf.exe'
- '<Current directory>\bmzzmcixwf.exe'
- '<Current directory>\lmbkkjsyxi.exe'
- '<Current directory>\rsmptflmlv.exe'
- '<Current directory>\bizgujfcbv.exe'
- '<Current directory>\edqfkmgfot.exe'
- '<Current directory>\kjbjthhldg.exe'
- '<Current directory>\nesijkqnye.exe'
- '<Current directory>\kmmwvmgnpt.exe'
- '<Current directory>\irkmugjdks.exe'
- '<Current directory>\fwittsetxq.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SPYQNXQCGF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FHFNZUVLQT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PXKEAZOCYT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CPZBMWTLII.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FLIACZBGDG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OBVJDDNETG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BTDGPAZFCV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OTSDAFEOMR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BMZZMCIXWF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IRKMUGJDKS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LMBKKJSYXI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RSMPTFLMLV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIZGUJFCBV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDQFKMGFOT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KJBJTHHLDG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NESIJKQNYE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KMMWVMGNPT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XMTTHRSOZH.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FWITTSETXQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZRXPTPLNIE.exe"
