Technical Information
Modifies file system
Creates the following files
- <Current directory>\fkyhykyuak.exe
- <Current directory>\nfjbqobjjo.exe
- <Current directory>\tkugzscpyb.exe
- <Current directory>\dahxsownob.exe
- <Current directory>\qtoudtawyx.exe
- <Current directory>\qldnjvrhra.exe
- <Current directory>\descvsviao.exe
- <Current directory>\muxtwxpgro.exe
- <Current directory>\amcfwjxaaa.exe
- <Current directory>\wkllptaezx.exe
- <Current directory>\zyqdkysjny.exe
- <Current directory>\jgdnlclivy.exe
- <Current directory>\vykjxapjem.exe
- <Current directory>\vrzducgbyp.exe
- <Current directory>\cwspdfhhmb.exe
- nul
- <Current directory>\lmxyektfcc.exe
- <Current directory>\pidmrcgtxx.exe
- <Current directory>\qeondnlksa.exe
Deletes the following files
- <Current directory>\fkyhykyuak.exe
- <Current directory>\tkugzscpyb.exe
- <Current directory>\nfjbqobjjo.exe
- <Current directory>\dahxsownob.exe
- <Current directory>\qtoudtawyx.exe
- <Current directory>\qldnjvrhra.exe
- <Current directory>\descvsviao.exe
- <Current directory>\muxtwxpgro.exe
- <Current directory>\wkllptaezx.exe
- <Current directory>\pidmrcgtxx.exe
- <Current directory>\zyqdkysjny.exe
- <Current directory>\jgdnlclivy.exe
- <Current directory>\vykjxapjem.exe
- <Current directory>\vrzducgbyp.exe
- <Current directory>\cwspdfhhmb.exe
- <Current directory>\lmxyektfcc.exe
- <Current directory>\qeondnlksa.exe
- <Current directory>\amcfwjxaaa.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\fkyhykyuak.exe'
- '<Current directory>\nfjbqobjjo.exe'
- '<Current directory>\tkugzscpyb.exe'
- '<Current directory>\dahxsownob.exe'
- '<Current directory>\qtoudtawyx.exe'
- '<Current directory>\qldnjvrhra.exe'
- '<Current directory>\descvsviao.exe'
- '<Current directory>\muxtwxpgro.exe'
- '<Current directory>\wkllptaezx.exe'
- '<Current directory>\pidmrcgtxx.exe'
- '<Current directory>\zyqdkysjny.exe'
- '<Current directory>\jgdnlclivy.exe'
- '<Current directory>\vykjxapjem.exe'
- '<Current directory>\vrzducgbyp.exe'
- '<Current directory>\cwspdfhhmb.exe'
- '<Current directory>\lmxyektfcc.exe'
- '<Current directory>\amcfwjxaaa.exe'
- '<Current directory>\qeondnlksa.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KDEDMCVJXY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ULJUOHGIFY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AQCYWKINUK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYOMJMGVUZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GOBWCIRLCZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QEONDNLKSA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AMCFWJXAAA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NFJBQOBJJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TKUGZSCPYB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DAHXSOWNOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QTOUDTAWYX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EXLZMHTEJL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QLDNJVRHRA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MUXTWXPGRO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WKLLPTAEZX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PIDMRCGTXX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYQDKYSJNY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGDNLCLIVY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYKJXAPJEM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VRZDUCGBYP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWSPDFHHMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LMXYEKTFCC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKYHYKYUAK.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DESCVSVIAO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XRAMDDAQUZ.exe"
