Technical Information
Modifies file system
Creates the following files
- <Current directory>\lbiafariil.exe
- <Current directory>\wrzfkjslfy.exe
- <Current directory>\mfxiurgpjl.exe
- <Current directory>\piohkmokwb.exe
- <Current directory>\cavewrttgx.exe
- <Current directory>\ptlapofcqm.exe
- <Current directory>\vyweysyhey.exe
- <Current directory>\ptaheljnxb.exe
- <Current directory>\fojwrwsguy.exe
- <Current directory>\bxvcexqfun.exe
- <Current directory>\bpswbayqny.exe
- nul
- <Current directory>\lxfncwsovy.exe
- <Current directory>\yqmkobwpfm.exe
- <Current directory>\evxoxfxdtz.exe
- <Current directory>\oeofssewkz.exe
- <Current directory>\tlfbrklnfm.exe
Deletes the following files
- <Current directory>\lbiafariil.exe
- <Current directory>\evxoxfxdtz.exe
- <Current directory>\yqmkobwpfm.exe
- <Current directory>\lxfncwsovy.exe
- <Current directory>\bpswbayqny.exe
- <Current directory>\bxvcexqfun.exe
- <Current directory>\oeofssewkz.exe
- <Current directory>\fojwrwsguy.exe
- <Current directory>\ptlapofcqm.exe
- <Current directory>\vyweysyhey.exe
- <Current directory>\cavewrttgx.exe
- <Current directory>\piohkmokwb.exe
- <Current directory>\mfxiurgpjl.exe
- <Current directory>\wrzfkjslfy.exe
- <Current directory>\tlfbrklnfm.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\lbiafariil.exe'
- '<Current directory>\evxoxfxdtz.exe'
- '<Current directory>\yqmkobwpfm.exe'
- '<Current directory>\lxfncwsovy.exe'
- '<Current directory>\bpswbayqny.exe'
- '<Current directory>\bxvcexqfun.exe'
- '<Current directory>\oeofssewkz.exe'
- '<Current directory>\fojwrwsguy.exe'
- '<Current directory>\vyweysyhey.exe'
- '<Current directory>\ptlapofcqm.exe'
- '<Current directory>\cavewrttgx.exe'
- '<Current directory>\piohkmokwb.exe'
- '<Current directory>\mfxiurgpjl.exe'
- '<Current directory>\wrzfkjslfy.exe'
- '<Current directory>\ptaheljnxb.exe'
- '<Current directory>\tlfbrklnfm.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GTNLVULXDN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QBACWYWWLO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ARFTXVQMCW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGSDQZCKKW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NCJCGCLFEN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCLNFANOGY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TLFBRKLNFM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PTAHELJNXB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WRZFKJSLFY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MFXIURGPJL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PIOHKMOKWB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CAVEWRTTGX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PTLAPOFCQM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYWEYSYHEY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FOJWRWSGUY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OEOFSSEWKZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BXVCEXQFUN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BPSWBAYQNY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LXFNCWSOVY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YQMKOBWPFM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVXOXFXDTZ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LBIAFARIIL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TAFOJXZOUZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KKSEQTNYEZ.exe"
