Technical Information
Modifies file system
Creates the following files
- <Current directory>\nqbqvbaqkr.exe
- <Current directory>\lnwmrlazen.exe
- <Current directory>\oimlhniure.exe
- <Current directory>\bjuiakndbs.exe
- <Current directory>\iofmboorpe.exe
- <Current directory>\hztfgqebjp.exe
- <Current directory>\uzjcsnjcad.exe
- <Current directory>\hsqzesnlkr.exe
- <Current directory>\oxbdmoozye.exe
- <Current directory>\eaknrullco.exe
- <Current directory>\hvtmpxtowe.exe
- <Current directory>\uwjiauypgb.exe
- <Current directory>\eeostyrnob.exe
- <Current directory>\rwvpnvwwyp.exe
- <Current directory>\dwklzaixhe.exe
- <Current directory>\qpsilxmgrs.exe
- nul
- <Current directory>\apttjeopad.exe
- <Current directory>\vkmkmfdftd.exe
- <Current directory>\bmubsexrvc.exe
Deletes the following files
- <Current directory>\nqbqvbaqkr.exe
- <Current directory>\bmubsexrvc.exe
- <Current directory>\vkmkmfdftd.exe
- <Current directory>\bjuiakndbs.exe
- <Current directory>\iofmboorpe.exe
- <Current directory>\hztfgqebjp.exe
- <Current directory>\uzjcsnjcad.exe
- <Current directory>\hsqzesnlkr.exe
- <Current directory>\oimlhniure.exe
- <Current directory>\oxbdmoozye.exe
- <Current directory>\hvtmpxtowe.exe
- <Current directory>\uwjiauypgb.exe
- <Current directory>\eeostyrnob.exe
- <Current directory>\rwvpnvwwyp.exe
- <Current directory>\dwklzaixhe.exe
- <Current directory>\qpsilxmgrs.exe
- <Current directory>\apttjeopad.exe
- <Current directory>\eaknrullco.exe
- <Current directory>\lnwmrlazen.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\nqbqvbaqkr.exe'
- '<Current directory>\lnwmrlazen.exe'
- '<Current directory>\oimlhniure.exe'
- '<Current directory>\bjuiakndbs.exe'
- '<Current directory>\iofmboorpe.exe'
- '<Current directory>\hztfgqebjp.exe'
- '<Current directory>\uzjcsnjcad.exe'
- '<Current directory>\hsqzesnlkr.exe'
- '<Current directory>\vkmkmfdftd.exe'
- '<Current directory>\oxbdmoozye.exe'
- '<Current directory>\hvtmpxtowe.exe'
- '<Current directory>\uwjiauypgb.exe'
- '<Current directory>\eeostyrnob.exe'
- '<Current directory>\rwvpnvwwyp.exe'
- '<Current directory>\dwklzaixhe.exe'
- '<Current directory>\qpsilxmgrs.exe'
- '<Current directory>\apttjeopad.exe'
- '<Current directory>\eaknrullco.exe'
- '<Current directory>\bmubsexrvc.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LNWMRLAZEN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OIMLHNIURE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BJUIAKNDBS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IOFMBOORPE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZTFGQEBJP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZJCSNJCAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HSQZESNLKR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXBDMOOZYE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VKMKMFDFTD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EAKNRULLCO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UWJIAUYPGB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EEOSTYRNOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RWVPNVWWYP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DWKLZAIXHE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QPSILXMGRS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\APTTJEOPAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NQBQVBAQKR.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HVTMPXTOWE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BMUBSEXRVC.exe"
