Technical Information
Modifies file system
Creates the following files
- <Current directory>\atznuylvjz.exe
- <Current directory>\nivxcrqcgj.exe
- <Current directory>\qaajyqscpm.exe
- nul
- <Current directory>\nmvrcltpbl.exe
- <Current directory>\ntgxxjlfhi.exe
- <Current directory>\nikezguvoy.exe
- <Current directory>\usvjaeywxn.exe
- <Current directory>\kcqahhnxhm.exe
- <Current directory>\hgztjeecuw.exe
- <Current directory>\yqmkqakeev.exe
- <Current directory>\vvvlaxjjrx.exe
- <Current directory>\oqkzrbivcl.exe
Deletes the following files
- <Current directory>\atznuylvjz.exe
- <Current directory>\qaajyqscpm.exe
- <Current directory>\nivxcrqcgj.exe
- <Current directory>\nmvrcltpbl.exe
- <Current directory>\nikezguvoy.exe
- <Current directory>\ntgxxjlfhi.exe
- <Current directory>\usvjaeywxn.exe
- <Current directory>\kcqahhnxhm.exe
- <Current directory>\hgztjeecuw.exe
- <Current directory>\yqmkqakeev.exe
- <Current directory>\vvvlaxjjrx.exe
- <Current directory>\oqkzrbivcl.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\atznuylvjz.exe'
- '<Current directory>\nivxcrqcgj.exe'
- '<Current directory>\qaajyqscpm.exe'
- '<Current directory>\nmvrcltpbl.exe'
- '<Current directory>\ntgxxjlfhi.exe'
- '<Current directory>\nikezguvoy.exe'
- '<Current directory>\usvjaeywxn.exe'
- '<Current directory>\kcqahhnxhm.exe'
- '<Current directory>\hgztjeecuw.exe'
- '<Current directory>\yqmkqakeev.exe'
- '<Current directory>\vvvlaxjjrx.exe'
- '<Current directory>\oqkzrbivcl.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXVFMZRLJI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OQKZRBIVCL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VVVLAXJJRX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YQMKQAKEEV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HGZTJEECUW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KCQAHHNXHM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LCEGWWRQOK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\USVJAEYWXN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTGXXJLFHI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NMVRCLTPBL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QAAJYQSCPM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIVXCRQCGJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ATZNUYLVJZ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIKEZGUVOY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IHOIGTINBL.exe"
