Technical Information
Modifies file system
Creates the following files
- <Current directory>\ehtsnqnzbg.exe
- <Current directory>\vzsvyqjnat.exe
- <Current directory>\irzsrvnwkh.exe
- <Current directory>\vkgpdsrxtv.exe
- <Current directory>\fatgwxlvje.exe
- <Current directory>\lfekfambyi.exe
- <Current directory>\bionjyjvbs.exe
- <Current directory>\obvjddnetg.exe
- <Current directory>\btdgpazfcv.exe
- <Current directory>\ybxubcpfur.exe
- <Current directory>\ukragdnmug.exe
- <Current directory>\eafshhhccg.exe
- <Current directory>\rsmptflmlv.exe
- <Current directory>\uvdnrhuggt.exe
- <Current directory>\hnkkdnyqqh.exe
- nul
- <Current directory>\ugrhokkzaw.exe
- <Current directory>\eweyqowpie.exe
- <Current directory>\fwittsetxq.exe
- <Current directory>\vgdcaosdhi.exe
Deletes the following files
- <Current directory>\ehtsnqnzbg.exe
- <Current directory>\vzsvyqjnat.exe
- <Current directory>\irzsrvnwkh.exe
- <Current directory>\vkgpdsrxtv.exe
- <Current directory>\fatgwxlvje.exe
- <Current directory>\lfekfambyi.exe
- <Current directory>\bionjyjvbs.exe
- <Current directory>\obvjddnetg.exe
- <Current directory>\vgdcaosdhi.exe
- <Current directory>\btdgpazfcv.exe
- <Current directory>\ukragdnmug.exe
- <Current directory>\eafshhhccg.exe
- <Current directory>\rsmptflmlv.exe
- <Current directory>\uvdnrhuggt.exe
- <Current directory>\hnkkdnyqqh.exe
- <Current directory>\ugrhokkzaw.exe
- <Current directory>\eweyqowpie.exe
- <Current directory>\ybxubcpfur.exe
- <Current directory>\fwittsetxq.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ehtsnqnzbg.exe'
- '<Current directory>\vzsvyqjnat.exe'
- '<Current directory>\irzsrvnwkh.exe'
- '<Current directory>\vkgpdsrxtv.exe'
- '<Current directory>\fatgwxlvje.exe'
- '<Current directory>\lfekfambyi.exe'
- '<Current directory>\bionjyjvbs.exe'
- '<Current directory>\obvjddnetg.exe'
- '<Current directory>\fwittsetxq.exe'
- '<Current directory>\btdgpazfcv.exe'
- '<Current directory>\ukragdnmug.exe'
- '<Current directory>\eafshhhccg.exe'
- '<Current directory>\rsmptflmlv.exe'
- '<Current directory>\uvdnrhuggt.exe'
- '<Current directory>\hnkkdnyqqh.exe'
- '<Current directory>\ugrhokkzaw.exe'
- '<Current directory>\eweyqowpie.exe'
- '<Current directory>\ybxubcpfur.exe'
- '<Current directory>\vgdcaosdhi.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VGDCAOSDHI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FWITTSETXQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VZSVYQJNAT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IRZSRVNWKH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VKGPDSRXTV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FATGWXLVJE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LFEKFAMBYI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIONJYJVBS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OBVJDDNETG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PBKYSSRPSE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BTDGPAZFCV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UKRAGDNMUG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EAFSHHHCCG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RSMPTFLMLV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UVDNRHUGGT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HNKKDNYQQH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UGRHOKKZAW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EWEYQOWPIE.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EHTSNQNZBG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YBXUBCPFUR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FLFGROFZKD.exe"
